agent-comms 9.0.10 → 9.0.12

package/dist/test/dm-send-capability-admission.integration.test.js

@@ -1,165 +0,0 @@
-/**
- * Integration test for receiver-side DM gating with a user-issued capability (agent-comms#162): a receiver's own user principal can admit an agent into its DM-communication scope by minting a dm:send grant, which the agent then presents alongside its DM join request to auto-admit without needing a fresh human decision each time -- the durable admission list this issue adds, distinct from (and additive to) dm-admission.integration.test.ts's own two-round human-consent flow, which remains the fallback when no dm:send grant is presented at all.
- */
-import { test, expect } from "vitest";
-import { deviceIdFromHex, deviceIdToHex, } from "wire-mesh-core/domain/device-id";
-import { mintCapabilityToken } from "wire-mesh-core/domain/tokens";
-import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
-import { MeshStore } from "../core/mesh-store.js";
-import { generateIdentity } from "../core/identity.js";
-import { toIdentityPort } from "../core/wire-mesh-identity.js";
-import { randomId } from "../core/random-id.js";
-import { loadOrCreateUserIdentity } from "../core/user-identity.js";
-import { DM_SEND_CAPABILITY } from "../core/dm-token-verification.js";
-import { waitFor, wireTestTransport } from "./test-transport.js";
-import { freeLocalPort } from "./hub-helpers.js";
-import { scratchDirectory } from "./scratch-directory.helper.js";
-/** A device-id, hex-encoded, is always exactly this many characters (32 raw bytes). */
-const DEVICE_ID_HEX_LENGTH = 64;
-/** Expiry window for a delegated dm:send token minted directly in these tests (agent-comms#187) -- comfortably longer than any single test run, matching device-membership.test.ts's own TOKEN_TTL_MS convention. */
-const DELEGATED_TOKEN_TTL_MS = 60_000;
-async function makeConnectedPair(port) {
-    const a = new MeshStore({ coordinatorPort: port });
-    await wireTestTransport(a);
-    await a.init();
-    await a.registerAgent({
-        name: "a",
-        harness: "test",
-        cwd: "/test/a",
-        pid: process.pid,
-        visibility: "visible",
-        tags: [],
-    });
-    const b = new MeshStore({ coordinatorPort: port });
-    await wireTestTransport(b);
-    await b.init();
-    await b.registerAgent({
-        name: "b",
-        harness: "test",
-        cwd: "/test/b",
-        pid: process.pid,
-        visibility: "visible",
-        tags: [],
-    });
-    await waitFor(() => a.serialise().agents[b.peerId] !== undefined, "a sees b's agent");
-    return { a, b };
-}
-test("presenting a dm:send grant B minted for A auto-admits A's DM request, with no pending decision for B", async () => {
-    const { a, b } = await makeConnectedPair(await freeLocalPort());
-    try {
-        const grant = await b.admitAgentForDm(a.peerId);
-        await a.requestDmAccess(b.peerId, grant);
-        expect(b.listPendingRoomJoins()).toEqual([]);
-        expect(a.listPendingRoomJoins()).toEqual([]);
-    }
-    finally {
-        await b.shutdown();
-        await a.shutdown();
-    }
-});
-test("presenting a grant minted for a different bearer is refused outright, with no pending decision left open", async () => {
-    const { a, b } = await makeConnectedPair(await freeLocalPort());
-    try {
-        // B admits some other device, never A -- A tries to present that grant as if it were its own.
-        const otherDeviceId = deviceIdFromHex("a".repeat(DEVICE_ID_HEX_LENGTH));
-        const grantForSomeoneElse = await b.admitAgentForDm(Buffer.from(otherDeviceId).toString("hex"));
-        await expect(a.requestDmAccess(b.peerId, grantForSomeoneElse)).rejects.toThrow(/was refused/);
-        expect(b.listPendingRoomJoins()).toEqual([]);
-    }
-    finally {
-        await b.shutdown();
-        await a.shutdown();
-    }
-});
-test("after B revokes A's dm:send grant, presenting the stale token is refused", async () => {
-    const { a, b } = await makeConnectedPair(await freeLocalPort());
-    try {
-        const grant = await b.admitAgentForDm(a.peerId);
-        await b.revokeAgentDmAccess(a.peerId);
-        await expect(a.requestDmAccess(b.peerId, grant)).rejects.toThrow(/was refused/);
-    }
-    finally {
-        await b.shutdown();
-        await a.shutdown();
-    }
-});
-test("revoking a bearer that was never admitted is a harmless no-op", async () => {
-    const { a, b } = await makeConnectedPair(await freeLocalPort());
-    try {
-        await expect(b.revokeAgentDmAccess(a.peerId)).resolves.toBeUndefined();
-    }
-    finally {
-        await b.shutdown();
-        await a.shutdown();
-    }
-});
-/** B's own user-principal identity, loaded from a directory this test controls directly (rather than the throwaway one wireTestTransport would otherwise generate internally and never disclose), so a test can compute the exact "user" scope path (B's own principal device-id, hex) a dm:send grant B mints is rooted at -- agent-comms#187's own principal-keyed admission tests need this to construct a further delegation whose scope actually narrows the grant it chains from. */
-function tempUserIdentityDir() {
-    return {
-        dir: scratchDirectory("agent-comms-b-user-identity-test-"),
-    };
-}
-test("admitting a bearer with a positive delegationsRemaining lets that bearer itself mint a further dm:send delegation (agent-comms#187)", async () => {
-    const bUserIdentityOptions = tempUserIdentityDir();
-    const bPrincipalHex = deviceIdToHex((await toIdentityPort(loadOrCreateUserIdentity(bUserIdentityOptions)))
-        .deviceId);
-    const clock = createSystemClock();
-    const b = new MeshStore({ coordinatorPort: await freeLocalPort() });
-    await wireTestTransport(b, { userIdentityOptions: bUserIdentityOptions });
-    await b.init();
-    try {
-        // The admitted bearer is a real principal identity here, not just a bare hex string -- only the entity actually holding bearerId's own key can mint a delegation of the grant, since mintCapabilityToken's own parent-narrowing requires the child's issuer to equal the parent's bearer.
-        const principal = await toIdentityPort(generateIdentity());
-        const bearerHex = deviceIdToHex(principal.deviceId);
-        const grant = await b.admitAgentForDm(bearerHex, 1);
-        const device = await toIdentityPort(generateIdentity());
-        const delegated = await mintCapabilityToken({
-            identity: principal,
-            clock,
-            tokenId: randomId(),
-            bearer: device.deviceId,
-            capability: DM_SEND_CAPABILITY,
-            scope: { kind: "user", path: bPrincipalHex },
-            expires: clock.now() + DELEGATED_TOKEN_TTL_MS,
-            delegationsRemaining: 0,
-            parent: grant,
-        });
-        expect(delegated.ok, `expected the delegation to succeed, got ${JSON.stringify(delegated)}`).toBe(true);
-    }
-    finally {
-        await b.shutdown();
-    }
-});
-test("admitting a bearer with no delegationsRemaining given stays non-delegable, exactly like the existing bare-device path", async () => {
-    const bUserIdentityOptions = tempUserIdentityDir();
-    const bPrincipalHex = deviceIdToHex((await toIdentityPort(loadOrCreateUserIdentity(bUserIdentityOptions)))
-        .deviceId);
-    const clock = createSystemClock();
-    const b = new MeshStore({ coordinatorPort: await freeLocalPort() });
-    await wireTestTransport(b, { userIdentityOptions: bUserIdentityOptions });
-    await b.init();
-    try {
-        const principal = await toIdentityPort(generateIdentity());
-        const bearerHex = deviceIdToHex(principal.deviceId);
-        const grant = await b.admitAgentForDm(bearerHex);
-        const device = await toIdentityPort(generateIdentity());
-        const delegated = await mintCapabilityToken({
-            identity: principal,
-            clock,
-            tokenId: randomId(),
-            bearer: device.deviceId,
-            capability: DM_SEND_CAPABILITY,
-            scope: { kind: "user", path: bPrincipalHex },
-            expires: clock.now() + DELEGATED_TOKEN_TTL_MS,
-            delegationsRemaining: 0,
-            parent: grant,
-        });
-        expect(delegated.ok).toBe(false);
-        if (!delegated.ok)
-            expect(delegated.reason).toBe("delegation_exceeds_parent");
-    }
-    finally {
-        await b.shutdown();
-    }
-});
-//# sourceMappingURL=dm-send-capability-admission.integration.test.js.map

package/dist/test/dm-send-capability-admission.integration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-send-capability-admission.integration.test.js","sourceRoot":"","sources":["../../src/test/dm-send-capability-admission.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,uFAAuF;AACvF,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,qNAAqN;AACrN,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC,KAAK,UAAU,iBAAiB,CAC9B,IAAY;IAEZ,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,MAAM,OAAO,CACX,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,EAClD,kBAAkB,CACnB,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;IACtH,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEzC,MAAM,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;IAC1H,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,8FAA8F;QAC9F,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACxE,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,eAAe,CACjD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC3C,CAAC;QAEF,MAAM,MAAM,CACV,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CACjD,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEjC,MAAM,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC9D,aAAa,CACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACzE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,2dAA2d;AAC3d,SAAS,mBAAmB;IAC1B,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC,mCAAmC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,qIAAqI,EAAE,KAAK,IAAI,EAAE;IACrJ,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC;IACnD,MAAM,aAAa,GAAG,aAAa,CACjC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,CAAC,CAAC;SACnE,QAAQ,CACZ,CAAC;IACF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,iBAAiB,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAEf,IAAI,CAAC;QACH,0RAA0R;QAC1R,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC;YAC1C,QAAQ,EAAE,SAAS;YACnB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,UAAU,EAAE,kBAAkB;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,sBAAsB;YAC7C,oBAAoB,EAAE,CAAC;YACvB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,MAAM,CACJ,SAAS,CAAC,EAAE,EACZ,2CAA2C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uHAAuH,EAAE,KAAK,IAAI,EAAE;IACvI,MAAM,oBAAoB,GAAG,mBAAmB,EAAE,CAAC;IACnD,MAAM,aAAa,GAAG,aAAa,CACjC,CAAC,MAAM,cAAc,CAAC,wBAAwB,CAAC,oBAAoB,CAAC,CAAC,CAAC;SACnE,QAAQ,CACZ,CAAC;IACF,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAElC,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,iBAAiB,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAEf,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC;YAC1C,QAAQ,EAAE,SAAS;YACnB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,UAAU,EAAE,kBAAkB;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,sBAAsB;YAC7C,oBAAoB,EAAE,CAAC;YACvB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,EAAE;YACf,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/dm-send-delegation.unit.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=dm-send-delegation.unit.test.d.ts.map

package/dist/test/dm-send-delegation.unit.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-send-delegation.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/dm-send-delegation.unit.test.ts"],"names":[],"mappings":""}

package/dist/test/dm-send-delegation.unit.test.js

@@ -1,180 +0,0 @@
-/**
- * Unit tests for core/dm-send-delegation: delegateDmSendToDevice, the primitive that lets a user principal already admitted into a remote user's DM-communication scope (room-lifecycle.ts's admitAgentForDm, minted with delegationsRemaining \> 0) sub-delegate that admission to one of its own devices (agent-comms#187) -- the dm:send counterpart to device-membership.test.ts's own admitDevice/removeDevice coverage.
- */
-import { describe, it, expect } from "vitest";
-import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
-import { mintCapabilityToken } from "wire-mesh-core/domain/tokens";
-import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
-import { createRevocationView } from "wire-mesh-core/domain/revocation-view";
-import { generateIdentity } from "../core/identity.js";
-import { toIdentityPort } from "../core/wire-mesh-identity.js";
-import { randomId } from "../core/random-id.js";
-import { loadOrCreateUserIdentity } from "../core/user-identity.js";
-import { openAccountLedger } from "../core/account-ledger-store.js";
-import { DM_SEND_CAPABILITY, DM_SEND_SCOPE_KIND, verifyDmSendToken, } from "../core/dm-token-verification.js";
-import { delegateDmSendToDevice } from "../core/dm-send-delegation.js";
-import { scratchDirectory } from "./scratch-directory.helper.js";
-const TOKEN_TTL_MS = 60_000;
-const NON_DELEGABLE = 0;
-const ONE_HOP_DELEGABLE = 1;
-function tempDir() {
-    return scratchDirectory("agent-comms-dm-delegation-test-");
-}
-/** A real, persisted user-principal identity and its account ledger, which delegateDmSendToDevice records the delegation in, opened the way device-membership.test.ts's own makeUser() opens them. */
-async function makeUser() {
-    const dir = tempDir();
-    const userIdentity = loadOrCreateUserIdentity({ dir });
-    const identity = await toIdentityPort(userIdentity);
-    const ledger = await openAccountLedger({
-        userIdentityOptions: { dir },
-        userIdentity,
-        clock: createSystemClock(),
-    });
-    return { identity, ledger };
-}
-async function outstandingTokenIds(ledger, deviceHex) {
-    const grants = await ledger.outstandingGrants("dm", deviceHex);
-    return grants.map((grant) => grant.tokenId);
-}
-/** Alice's own root-level dm:send grant naming bearer as the admitted party -- the same shape room-lifecycle.ts's admitAgentForDm mints, built directly here so this file's own tests don't need a full MeshStore. Takes an explicit expires (rather than deriving one from clock.now() itself) so a caller can mint a child token sharing the identical expiry -- a real wall clock advances between two calls, and a child's own expires must never exceed its parent's. */
-async function mintRootGrant(options) {
-    const { admitter, bearer, clock, delegationsRemaining, expires } = options;
-    const verdict = await mintCapabilityToken({
-        identity: admitter,
-        clock,
-        tokenId: randomId(),
-        bearer,
-        capability: DM_SEND_CAPABILITY,
-        scope: { kind: DM_SEND_SCOPE_KIND, path: deviceIdToHex(admitter.deviceId) },
-        expires,
-        delegationsRemaining,
-    });
-    if (!verdict.ok)
-        throw new Error("expected root grant to mint");
-    return verdict.token;
-}
-describe("delegateDmSendToDevice", () => {
-    it("mints a dm:send token bearing the device, chaining back to the remote admitting principal", async () => {
-        const alice = await toIdentityPort(generateIdentity());
-        const { identity: bobPrincipal, ledger } = await makeUser();
-        const bobDevice = await toIdentityPort(generateIdentity());
-        const clock = createSystemClock();
-        const expires = clock.now() + TOKEN_TTL_MS;
-        const grant = await mintRootGrant({
-            admitter: alice,
-            bearer: bobPrincipal.deviceId,
-            clock,
-            delegationsRemaining: ONE_HOP_DELEGABLE,
-            expires,
-        });
-        const verdict = await delegateDmSendToDevice({
-            userIdentity: bobPrincipal,
-            accountLedger: ledger,
-            clock,
-            tokenId: randomId(),
-            parent: grant,
-            deviceId: bobDevice.deviceId,
-            remoteUserPrincipalDeviceId: alice.deviceId,
-            expires,
-        });
-        expect(verdict.ok, `expected delegation to succeed, got ${JSON.stringify(verdict)}`).toBe(true);
-        if (!verdict.ok)
-            return;
-        const checked = await verifyDmSendToken(verdict.token, {
-            identity: alice,
-            clock,
-            revocation: createRevocationView(),
-            expectedBearer: bobDevice.deviceId,
-            userPrincipalDeviceId: alice.deviceId,
-        });
-        expect(checked.ok, JSON.stringify(checked)).toBe(true);
-    });
-    it("records the delegated grant's token-id under the delegating principal's own store, keyed by device hex", async () => {
-        const alice = await toIdentityPort(generateIdentity());
-        const { identity: bobPrincipal, ledger } = await makeUser();
-        const bobDevice = await toIdentityPort(generateIdentity());
-        const clock = createSystemClock();
-        const tokenId = randomId();
-        const expires = clock.now() + TOKEN_TTL_MS;
-        const grant = await mintRootGrant({
-            admitter: alice,
-            bearer: bobPrincipal.deviceId,
-            clock,
-            delegationsRemaining: ONE_HOP_DELEGABLE,
-            expires,
-        });
-        const verdict = await delegateDmSendToDevice({
-            userIdentity: bobPrincipal,
-            accountLedger: ledger,
-            clock,
-            tokenId,
-            parent: grant,
-            deviceId: bobDevice.deviceId,
-            remoteUserPrincipalDeviceId: alice.deviceId,
-            expires,
-        });
-        expect(verdict.ok).toBe(true);
-        const deviceHex = deviceIdToHex(bobDevice.deviceId);
-        expect(await outstandingTokenIds(ledger, deviceHex)).toEqual([tokenId]);
-    });
-    it("refuses when the parent grant carries no further delegation depth, and records nothing", async () => {
-        const alice = await toIdentityPort(generateIdentity());
-        const { identity: bobPrincipal, ledger } = await makeUser();
-        const bobDevice = await toIdentityPort(generateIdentity());
-        const clock = createSystemClock();
-        const expires = clock.now() + TOKEN_TTL_MS;
-        // The original, non-delegable admission -- exactly what admitAgentForDm mints by default.
-        const grant = await mintRootGrant({
-            admitter: alice,
-            bearer: bobPrincipal.deviceId,
-            clock,
-            delegationsRemaining: NON_DELEGABLE,
-            expires,
-        });
-        const verdict = await delegateDmSendToDevice({
-            userIdentity: bobPrincipal,
-            accountLedger: ledger,
-            clock,
-            tokenId: randomId(),
-            parent: grant,
-            deviceId: bobDevice.deviceId,
-            remoteUserPrincipalDeviceId: alice.deviceId,
-            expires,
-        });
-        expect(verdict.ok).toBe(false);
-        if (!verdict.ok)
-            expect(verdict.reason).toBe("delegation_exceeds_parent");
-        const deviceHex = deviceIdToHex(bobDevice.deviceId);
-        expect(await outstandingTokenIds(ledger, deviceHex)).toEqual([]);
-    });
-    it("refuses when the caller's identity is not the parent grant's own bearer", async () => {
-        const alice = await toIdentityPort(generateIdentity());
-        const { identity: bobPrincipal, ledger } = await makeUser();
-        const someoneElse = await toIdentityPort(generateIdentity());
-        const bobDevice = await toIdentityPort(generateIdentity());
-        const clock = createSystemClock();
-        const expires = clock.now() + TOKEN_TTL_MS;
-        const grant = await mintRootGrant({
-            admitter: alice,
-            bearer: bobPrincipal.deviceId,
-            clock,
-            delegationsRemaining: ONE_HOP_DELEGABLE,
-            expires,
-        });
-        const verdict = await delegateDmSendToDevice({
-            // someoneElse never received this grant -- only bobPrincipal (the parent's own bearer) may mint a delegation of it.
-            userIdentity: someoneElse,
-            accountLedger: ledger,
-            clock,
-            tokenId: randomId(),
-            parent: grant,
-            deviceId: bobDevice.deviceId,
-            remoteUserPrincipalDeviceId: alice.deviceId,
-            expires,
-        });
-        expect(verdict.ok).toBe(false);
-        if (!verdict.ok)
-            expect(verdict.reason).toBe("parent_bearer_mismatch");
-    });
-});
-//# sourceMappingURL=dm-send-delegation.unit.test.js.map

package/dist/test/dm-send-delegation.unit.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-send-delegation.unit.test.js","sourceRoot":"","sources":["../../src/test/dm-send-delegation.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAS,OAAO;IACd,OAAO,gBAAgB,CAAC,iCAAiC,CAAC,CAAC;AAC7D,CAAC;AAED,sMAAsM;AACtM,KAAK,UAAU,QAAQ;IAIrB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,YAAY,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,mBAAmB,EAAE,EAAE,GAAG,EAAE;QAC5B,YAAY;QACZ,KAAK,EAAE,iBAAiB,EAAE;KAC3B,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAqB,EACrB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,8cAA8c;AAC9c,KAAK,UAAU,aAAa,CAAC,OAM5B;IACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,QAAQ,EAAE,QAAQ;QAClB,KAAK;QACL,OAAO,EAAE,QAAQ,EAAE;QACnB,MAAM;QACN,UAAU,EAAE,kBAAkB;QAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC3E,OAAO;QACP,oBAAoB;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,YAAY,CAAC,QAAQ;YAC7B,KAAK;YACL,oBAAoB,EAAE,iBAAiB;YACvC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,2BAA2B,EAAE,KAAK,CAAC,QAAQ;YAC3C,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CACJ,OAAO,CAAC,EAAE,EACV,uCAAuC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO;QAExB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE;YACrD,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;YAClC,qBAAqB,EAAE,KAAK,CAAC,QAAQ;SACtC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,YAAY,CAAC,QAAQ;YAC7B,KAAK;YACL,oBAAoB,EAAE,iBAAiB;YACvC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,OAAO;YACP,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,2BAA2B,EAAE,KAAK,CAAC,QAAQ;YAC3C,OAAO;SACR,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9B,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE3C,0FAA0F;QAC1F,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,YAAY,CAAC,QAAQ;YAC7B,KAAK;YACL,oBAAoB,EAAE,aAAa;YACnC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,2BAA2B,EAAE,KAAK,CAAC,QAAQ;YAC3C,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,YAAY,CAAC,QAAQ;YAC7B,KAAK;YACL,oBAAoB,EAAE,iBAAiB;YACvC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,oHAAoH;YACpH,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,MAAM;YACrB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,2BAA2B,EAAE,KAAK,CAAC,QAAQ;YAC3C,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/dm-send-principal-delegation.integration.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=dm-send-principal-delegation.integration.test.d.ts.map

package/dist/test/dm-send-principal-delegation.integration.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-send-principal-delegation.integration.test.d.ts","sourceRoot":"","sources":["../../src/test/dm-send-principal-delegation.integration.test.ts"],"names":[],"mappings":""}

package/dist/test/dm-send-principal-delegation.integration.test.js

@@ -1,90 +0,0 @@
-/**
- * End-to-end integration test for agent-comms#187: a user principal admitted into another user's DM-communication scope with room delegation depth (admitAgentForDm) mints, via delegateDmSendToDevice, a further dm:send token naming one of its own devices as bearer -- and that device's own requestDmAccess, presenting only the delegated token, auto-admits exactly the way a directly-admitted bare device already does in dm-send-capability-admission.integration.test.ts. Proves the full "trust this whole person, not just one of their devices" flow the issue names, end to end over a real wire connection.
- */
-import { test, expect } from "vitest";
-import { deviceIdFromHex, deviceIdToHex, } from "wire-mesh-core/domain/device-id";
-import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
-import { MeshStore } from "../core/mesh-store.js";
-import { loadOrCreateUserIdentity } from "../core/user-identity.js";
-import { openAccountLedger } from "../core/account-ledger-store.js";
-import { toIdentityPort } from "../core/wire-mesh-identity.js";
-import { randomId } from "../core/random-id.js";
-import { delegateDmSendToDevice } from "../core/dm-send-delegation.js";
-import { waitFor, wireTestTransport } from "./test-transport.js";
-import { freeLocalPort } from "./hub-helpers.js";
-import { scratchDirectory } from "./scratch-directory.helper.js";
-/** Delegated token expiry -- comfortably longer than a single test run, matching this file's sibling integration tests' own convention. */
-const DELEGATED_TOKEN_TTL_MS = 60_000;
-/** The admitted principal keeps exactly one further hop of delegation depth, enough to reach one of its own devices -- the minimal case the issue itself describes ("sub-delegate to its own devices"). */
-const ONE_HOP_DELEGABLE = 1;
-function tempUserIdentityDir() {
-    return {
-        dir: scratchDirectory("agent-comms-principal-delegation-test-"),
-    };
-}
-test("a principal's own device, holding only a delegated dm:send token, auto-admits into the admitting user's DM scope", async () => {
-    const port = await freeLocalPort();
-    // Alice's own user-principal identity is controlled directly (not the throwaway one wireTestTransport would otherwise generate and never disclose), so this test can compute the exact "user" scope path a delegated token must keep naming.
-    const aliceUserIdentityOptions = tempUserIdentityDir();
-    const alicePrincipal = await toIdentityPort(loadOrCreateUserIdentity(aliceUserIdentityOptions));
-    const a = new MeshStore({ coordinatorPort: port });
-    await wireTestTransport(a, { userIdentityOptions: aliceUserIdentityOptions });
-    await a.init();
-    await a.registerAgent({
-        name: "alice",
-        harness: "test",
-        cwd: "/test/alice",
-        pid: process.pid,
-        visibility: "visible",
-        tags: [],
-    });
-    // Bob's own user-principal identity -- distinct from any bridge-slot device identity, and distinct from any of Bob's own devices below.
-    const bobUserIdentityOptions = tempUserIdentityDir();
-    const bobUserIdentity = loadOrCreateUserIdentity(bobUserIdentityOptions);
-    const bobPrincipal = await toIdentityPort(bobUserIdentity);
-    const bobLedger = await openAccountLedger({
-        userIdentityOptions: bobUserIdentityOptions,
-        userIdentity: bobUserIdentity,
-        clock: createSystemClock(),
-    });
-    // One of Bob's own devices -- an ordinary bridge slot, wired and connected to Alice exactly like any other peer.
-    const d = new MeshStore({ coordinatorPort: port });
-    await wireTestTransport(d);
-    await d.init();
-    await d.registerAgent({
-        name: "bobs-device",
-        harness: "test",
-        cwd: "/test/bobs-device",
-        pid: process.pid,
-        visibility: "visible",
-        tags: [],
-    });
-    await waitFor(() => a.serialise().agents[d.peerId] !== undefined, "alice sees bob's device");
-    try {
-        // Alice trusts Bob's own principal -- not this specific device -- with enough delegation depth for Bob to admit his own devices.
-        const grant = await a.admitAgentForDm(deviceIdToHex(bobPrincipal.deviceId), ONE_HOP_DELEGABLE);
-        // Bob's principal delegates that admission to this one device, out of band from Alice entirely -- Alice never learns this device's own device-id in advance.
-        const clock = createSystemClock();
-        const delegated = await delegateDmSendToDevice({
-            userIdentity: bobPrincipal,
-            accountLedger: bobLedger,
-            clock,
-            tokenId: randomId(),
-            parent: grant,
-            deviceId: deviceIdFromHex(d.peerId),
-            remoteUserPrincipalDeviceId: alicePrincipal.deviceId,
-            expires: clock.now() + DELEGATED_TOKEN_TTL_MS,
-        });
-        expect(delegated.ok, `expected the delegation to succeed, got ${JSON.stringify(delegated)}`).toBe(true);
-        if (!delegated.ok)
-            return;
-        await d.requestDmAccess(a.peerId, delegated.token);
-        expect(a.listPendingRoomJoins()).toEqual([]);
-        expect(d.listPendingRoomJoins()).toEqual([]);
-    }
-    finally {
-        await d.shutdown();
-        await a.shutdown();
-    }
-});
-//# sourceMappingURL=dm-send-principal-delegation.integration.test.js.map

package/dist/test/dm-send-principal-delegation.integration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-send-principal-delegation.integration.test.js","sourceRoot":"","sources":["../../src/test/dm-send-principal-delegation.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,2IAA2I;AAC3I,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,2MAA2M;AAC3M,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAS,mBAAmB;IAC1B,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC,wCAAwC,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,kHAAkH,EAAE,KAAK,IAAI,EAAE;IAClI,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IAEnC,6OAA6O;IAC7O,MAAM,wBAAwB,GAAG,mBAAmB,EAAE,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,wBAAwB,CAAC,wBAAwB,CAAC,CACnD,CAAC;IAEF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,iBAAiB,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,wIAAwI;IACxI,MAAM,sBAAsB,GAAG,mBAAmB,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,wBAAwB,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC;QACxC,mBAAmB,EAAE,sBAAsB;QAC3C,YAAY,EAAE,eAAe;QAC7B,KAAK,EAAE,iBAAiB,EAAE;KAC3B,CAAC,CAAC;IAEH,iHAAiH;IACjH,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACf,MAAM,CAAC,CAAC,aAAa,CAAC;QACpB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,MAAM,OAAO,CACX,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,EAClD,yBAAyB,CAC1B,CAAC;IAEF,IAAI,CAAC;QACH,iIAAiI;QACjI,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,eAAe,CACnC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,EACpC,iBAAiB,CAClB,CAAC;QAEF,6JAA6J;QAC7J,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC;YAC7C,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,SAAS;YACxB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;YACnC,2BAA2B,EAAE,cAAc,CAAC,QAAQ;YACpD,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,sBAAsB;SAC9C,CAAC,CAAC;QACH,MAAM,CACJ,SAAS,CAAC,EAAE,EACZ,2CAA2C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO;QAE1B,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAEnD,MAAM,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/dm-token-verification.unit.test.d.ts

@@ -1,5 +0,0 @@
-/**
- * Unit tests for verifyDmSendToken (agent-comms#162): the receiver-side check that a presented capability token genuinely proves the local user principal admitted its bearer into DM contact -- mirroring room-token-verification.test.ts's own coverage of verifyRoomToken, but rooted at a user principal rather than a room owner.
- */
-export {};
-//# sourceMappingURL=dm-token-verification.unit.test.d.ts.map

package/dist/test/dm-token-verification.unit.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dm-token-verification.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/dm-token-verification.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}