agent-passport-system 5.0.3 → 6.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -7
- package/SECURITY.md +111 -0
- package/dist/src/adapters/gonka.d.ts.map +1 -1
- package/dist/src/adapters/gonka.js +7 -1
- package/dist/src/adapters/gonka.js.map +1 -1
- package/dist/src/adapters/ibac.d.ts.map +1 -1
- package/dist/src/adapters/ibac.js +25 -4
- package/dist/src/adapters/ibac.js.map +1 -1
- package/dist/src/adapters/oauth-id-jag/index.d.ts.map +1 -1
- package/dist/src/adapters/oauth-id-jag/index.js +7 -1
- package/dist/src/adapters/oauth-id-jag/index.js.map +1 -1
- package/dist/src/cli/index.js +5 -3
- package/dist/src/cli/index.js.map +1 -1
- package/dist/src/contract.d.ts.map +1 -1
- package/dist/src/contract.js +4 -1
- package/dist/src/contract.js.map +1 -1
- package/dist/src/core/anchor-state.d.ts.map +1 -1
- package/dist/src/core/anchor-state.js +8 -1
- package/dist/src/core/anchor-state.js.map +1 -1
- package/dist/src/core/attestation.d.ts.map +1 -1
- package/dist/src/core/attestation.js +59 -8
- package/dist/src/core/attestation.js.map +1 -1
- package/dist/src/core/behavioral-memory.d.ts.map +1 -1
- package/dist/src/core/behavioral-memory.js +9 -5
- package/dist/src/core/behavioral-memory.js.map +1 -1
- package/dist/src/core/bilateral-receipt.d.ts.map +1 -1
- package/dist/src/core/bilateral-receipt.js +33 -14
- package/dist/src/core/bilateral-receipt.js.map +1 -1
- package/dist/src/core/canonical.d.ts.map +1 -1
- package/dist/src/core/canonical.js +34 -6
- package/dist/src/core/canonical.js.map +1 -1
- package/dist/src/core/charter.d.ts.map +1 -1
- package/dist/src/core/charter.js +13 -3
- package/dist/src/core/charter.js.map +1 -1
- package/dist/src/core/commerce.d.ts +4 -1
- package/dist/src/core/commerce.d.ts.map +1 -1
- package/dist/src/core/commerce.js +8 -4
- package/dist/src/core/commerce.js.map +1 -1
- package/dist/src/core/coordination.d.ts.map +1 -1
- package/dist/src/core/coordination.js +14 -8
- package/dist/src/core/coordination.js.map +1 -1
- package/dist/src/core/credential-request.d.ts +25 -8
- package/dist/src/core/credential-request.d.ts.map +1 -1
- package/dist/src/core/credential-request.js +48 -102
- package/dist/src/core/credential-request.js.map +1 -1
- package/dist/src/core/cross-chain.d.ts +0 -3
- package/dist/src/core/cross-chain.d.ts.map +1 -1
- package/dist/src/core/cross-chain.js +49 -16
- package/dist/src/core/cross-chain.js.map +1 -1
- package/dist/src/core/data-lifecycle.d.ts.map +1 -1
- package/dist/src/core/data-lifecycle.js +9 -2
- package/dist/src/core/data-lifecycle.js.map +1 -1
- package/dist/src/core/data-source.d.ts.map +1 -1
- package/dist/src/core/data-source.js +26 -10
- package/dist/src/core/data-source.js.map +1 -1
- package/dist/src/core/decision-semantics.d.ts +37 -2
- package/dist/src/core/decision-semantics.d.ts.map +1 -1
- package/dist/src/core/decision-semantics.js +151 -12
- package/dist/src/core/decision-semantics.js.map +1 -1
- package/dist/src/core/delegation.d.ts.map +1 -1
- package/dist/src/core/delegation.js +34 -18
- package/dist/src/core/delegation.js.map +1 -1
- package/dist/src/core/did-uri.d.ts +3 -2
- package/dist/src/core/did-uri.d.ts.map +1 -1
- package/dist/src/core/did-uri.js +22 -4
- package/dist/src/core/did-uri.js.map +1 -1
- package/dist/src/core/escalation.d.ts.map +1 -1
- package/dist/src/core/escalation.js +32 -9
- package/dist/src/core/escalation.js.map +1 -1
- package/dist/src/core/evidence-bundle.d.ts.map +1 -1
- package/dist/src/core/evidence-bundle.js +11 -4
- package/dist/src/core/evidence-bundle.js.map +1 -1
- package/dist/src/core/execution-attestation.d.ts.map +1 -1
- package/dist/src/core/execution-attestation.js +56 -7
- package/dist/src/core/execution-attestation.js.map +1 -1
- package/dist/src/core/execution-envelope.d.ts +85 -13
- package/dist/src/core/execution-envelope.d.ts.map +1 -1
- package/dist/src/core/execution-envelope.js +171 -29
- package/dist/src/core/execution-envelope.js.map +1 -1
- package/dist/src/core/feasibility.d.ts.map +1 -1
- package/dist/src/core/feasibility.js +35 -4
- package/dist/src/core/feasibility.js.map +1 -1
- package/dist/src/core/federation.d.ts.map +1 -1
- package/dist/src/core/federation.js +4 -1
- package/dist/src/core/federation.js.map +1 -1
- package/dist/src/core/freshness.d.ts +4 -0
- package/dist/src/core/freshness.d.ts.map +1 -1
- package/dist/src/core/freshness.js +9 -2
- package/dist/src/core/freshness.js.map +1 -1
- package/dist/src/core/governance-block.d.ts +38 -3
- package/dist/src/core/governance-block.d.ts.map +1 -1
- package/dist/src/core/governance-block.js +72 -22
- package/dist/src/core/governance-block.js.map +1 -1
- package/dist/src/core/governance.d.ts.map +1 -1
- package/dist/src/core/governance.js +51 -10
- package/dist/src/core/governance.js.map +1 -1
- package/dist/src/core/identity-bridge.d.ts.map +1 -1
- package/dist/src/core/identity-bridge.js +15 -2
- package/dist/src/core/identity-bridge.js.map +1 -1
- package/dist/src/core/intent.d.ts +6 -0
- package/dist/src/core/intent.d.ts.map +1 -1
- package/dist/src/core/intent.js +4 -1
- package/dist/src/core/intent.js.map +1 -1
- package/dist/src/core/key-rotation.d.ts.map +1 -1
- package/dist/src/core/key-rotation.js +20 -6
- package/dist/src/core/key-rotation.js.map +1 -1
- package/dist/src/core/obligations.d.ts.map +1 -1
- package/dist/src/core/obligations.js +28 -5
- package/dist/src/core/obligations.js.map +1 -1
- package/dist/src/core/passport.d.ts.map +1 -1
- package/dist/src/core/passport.js +26 -6
- package/dist/src/core/passport.js.map +1 -1
- package/dist/src/core/policy.d.ts +71 -1
- package/dist/src/core/policy.d.ts.map +1 -1
- package/dist/src/core/policy.js +135 -12
- package/dist/src/core/policy.js.map +1 -1
- package/dist/src/core/principal.d.ts.map +1 -1
- package/dist/src/core/principal.js +17 -4
- package/dist/src/core/principal.js.map +1 -1
- package/dist/src/core/reputation-authority.d.ts.map +1 -1
- package/dist/src/core/reputation-authority.js +27 -11
- package/dist/src/core/reputation-authority.js.map +1 -1
- package/dist/src/core/reserve.d.ts.map +1 -1
- package/dist/src/core/reserve.js +12 -4
- package/dist/src/core/reserve.js.map +1 -1
- package/dist/src/core/rfc3339.d.ts +72 -0
- package/dist/src/core/rfc3339.d.ts.map +1 -0
- package/dist/src/core/rfc3339.js +206 -0
- package/dist/src/core/rfc3339.js.map +1 -0
- package/dist/src/core/routing.d.ts.map +1 -1
- package/dist/src/core/routing.js +7 -2
- package/dist/src/core/routing.js.map +1 -1
- package/dist/src/core/time.d.ts.map +1 -1
- package/dist/src/core/time.js +34 -10
- package/dist/src/core/time.js.map +1 -1
- package/dist/src/core/transactional.d.ts.map +1 -1
- package/dist/src/core/transactional.js +13 -3
- package/dist/src/core/transactional.js.map +1 -1
- package/dist/src/core/trust-adapters.d.ts.map +1 -1
- package/dist/src/core/trust-adapters.js +2 -1
- package/dist/src/core/trust-adapters.js.map +1 -1
- package/dist/src/core/values.d.ts.map +1 -1
- package/dist/src/core/values.js +12 -4
- package/dist/src/core/values.js.map +1 -1
- package/dist/src/core/vc-proof.d.ts +74 -0
- package/dist/src/core/vc-proof.d.ts.map +1 -0
- package/dist/src/core/vc-proof.js +142 -0
- package/dist/src/core/vc-proof.js.map +1 -0
- package/dist/src/core/vc-wrapper.d.ts +76 -7
- package/dist/src/core/vc-wrapper.d.ts.map +1 -1
- package/dist/src/core/vc-wrapper.js +181 -75
- package/dist/src/core/vc-wrapper.js.map +1 -1
- package/dist/src/core/vc.d.ts +96 -11
- package/dist/src/core/vc.d.ts.map +1 -1
- package/dist/src/core/vc.js +177 -49
- package/dist/src/core/vc.js.map +1 -1
- package/dist/src/index.d.ts +5 -2
- package/dist/src/index.d.ts.map +1 -1
- package/dist/src/index.js +1 -1
- package/dist/src/index.js.map +1 -1
- package/dist/src/types/decision-semantics.d.ts +19 -0
- package/dist/src/types/decision-semantics.d.ts.map +1 -1
- package/dist/src/types/did.d.ts +9 -0
- package/dist/src/types/did.d.ts.map +1 -1
- package/dist/src/types/execution-envelope.d.ts +33 -3
- package/dist/src/types/execution-envelope.d.ts.map +1 -1
- package/dist/src/types/passport.d.ts +6 -5
- package/dist/src/types/passport.d.ts.map +1 -1
- package/dist/src/types/passport.js.map +1 -1
- package/dist/src/v2/attribution-consent/types.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/types.js +22 -4
- package/dist/src/v2/attribution-consent/types.js.map +1 -1
- package/dist/src/v2/attribution-consent/verify.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/verify.js +38 -0
- package/dist/src/v2/attribution-consent/verify.js.map +1 -1
- package/dist/src/v2/offline-verifier/context.d.ts +1 -1
- package/dist/src/v2/offline-verifier/context.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/context.js +20 -1
- package/dist/src/v2/offline-verifier/context.js.map +1 -1
- package/dist/src/verification/trust-anchors.d.ts.map +1 -1
- package/dist/src/verification/trust-anchors.js +9 -0
- package/dist/src/verification/trust-anchors.js.map +1 -1
- package/dist/src/verification/trust-posture.d.ts.map +1 -1
- package/dist/src/verification/trust-posture.js +19 -12
- package/dist/src/verification/trust-posture.js.map +1 -1
- package/dist/src/verification/verify.d.ts +5 -0
- package/dist/src/verification/verify.d.ts.map +1 -1
- package/dist/src/verification/verify.js +54 -12
- package/dist/src/verification/verify.js.map +1 -1
- package/docs/verification-boundary.md +14 -0
- package/package.json +7 -4
package/README.md
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
<p align="center">
|
|
2
|
-
<img src="docs/assets/banner-hero.png" alt="Agent Passport System banner.
|
|
2
|
+
<img src="docs/assets/banner-hero.png" alt="Agent Passport System banner. Verifiable agent authority and action evidence. Cryptographic identity, scoped delegation, signed action receipts." width="100%">
|
|
3
3
|
</p>
|
|
4
4
|
|
|
5
5
|
APS lets a person or company give an AI agent limited authority to act on its behalf, and produces verifiable proof of what the agent does with it. Open protocol, Apache 2.0.
|
|
6
6
|
|
|
7
7
|
[](https://www.npmjs.com/package/agent-passport-system)
|
|
8
8
|
[](https://github.com/aeoess/agent-passport-system/blob/main/LICENSE)
|
|
9
|
-
[](https://github.com/aeoess/agent-passport-system/actions/workflows/tests.yml)
|
|
10
10
|
[](https://doi.org/10.5281/zenodo.18749779)
|
|
11
11
|
[](https://www.bestpractices.dev/projects/13536)
|
|
12
12
|
[](https://www.bestpractices.dev/projects/13536)
|
|
@@ -38,7 +38,7 @@ flowchart LR
|
|
|
38
38
|
npm install agent-passport-system
|
|
39
39
|
```
|
|
40
40
|
|
|
41
|
-
Also implemented in [Python](https://pypi.org/project/agent-passport-system/)
|
|
41
|
+
Also implemented in [Python](https://pypi.org/project/agent-passport-system/), [Go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) and [Rust](https://crates.io/crates/agent-passport-system), each checked against this TypeScript reference through the conformance suite.
|
|
42
42
|
|
|
43
43
|
Verify any receipt or evidence bundle in your browser at [agent-passport.org/verify.html](https://agent-passport.org/verify.html) (runs locally, nothing is uploaded). Machine-readable docs for agents are at [agent-passport.org/llms.txt](https://agent-passport.org/llms.txt).
|
|
44
44
|
|
|
@@ -74,7 +74,7 @@ What ships in every deployment.
|
|
|
74
74
|
Every primitive in this README carries one of three labels so you know how much weight it can bear today.
|
|
75
75
|
|
|
76
76
|
- **Canonical** -- stable, signed-bytes frozen, covered by conformance fixtures. Breaking these would break cross-implementation verification. Build on them.
|
|
77
|
-
- **
|
|
77
|
+
- **Stable extension** -- shipped and tested, optional, additive to the canonical core; the surface may still grow.
|
|
78
78
|
- **Experimental** -- published for review and tested, but the shape may change. Pin a version before depending on it.
|
|
79
79
|
|
|
80
80
|
Where enforcement sits:
|
|
@@ -249,9 +249,10 @@ The composition contract specifies how a verifier MUST cross-check per-request s
|
|
|
249
249
|
|
|
250
250
|
## Numbers
|
|
251
251
|
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
|
|
252
|
+
The test total is reported by `npm test` and by the tests badge above; it is not written into
|
|
253
|
+
prose here or in `package.json`, so it cannot drift. Framework adapters for CrewAI, LangChain,
|
|
254
|
+
ADK, A2A, MCP, OpenShell, IBAC, Gonka. Gateway evaluation under 2ms in the benchmarks under
|
|
255
|
+
`benchmarks/`. Zero heavy dependencies. Apache-2.0.
|
|
255
256
|
|
|
256
257
|
## Papers
|
|
257
258
|
|
|
@@ -269,6 +270,7 @@ The test count is one number derived from the suite, not three guesses. The badg
|
|
|
269
270
|
## Security and conformance
|
|
270
271
|
|
|
271
272
|
- [Threat model](/THREAT_MODEL.md) -- actors, assets, trust boundaries, what APS prevents and what it does not, verifier responsibilities.
|
|
273
|
+
- [Verification boundary](https://github.com/aeoess/agent-passport-system/blob/main/docs/verification-boundary.md) -- which verification APIs establish authority from caller-supplied trust, and the trust input each one takes.
|
|
272
274
|
- [Conformance fixtures](tests/conformance/README.md) -- golden valid and negative receipt fixtures every verifier must agree on.
|
|
273
275
|
- [Payment Safety Profile](docs/PAYMENT-SAFETY-PROFILE.md) -- the mandatory profile for agent-initiated payments.
|
|
274
276
|
- [MCP Authorization Profile](docs/MCP-AUTHORIZATION-PROFILE.md) -- aps-mcp-1 pre-dispatch authorization for `tools/call`, including the mcp-use adapter.
|
package/SECURITY.md
ADDED
|
@@ -0,0 +1,111 @@
|
|
|
1
|
+
# Security Policy
|
|
2
|
+
|
|
3
|
+
## Reporting Vulnerabilities
|
|
4
|
+
|
|
5
|
+
If you discover a security vulnerability in the Agent Passport System, please report it responsibly.
|
|
6
|
+
|
|
7
|
+
**Report privately:** https://github.com/aeoess/agent-passport-system/security/advisories
|
|
8
|
+
**Email:** security@aeoess.com
|
|
9
|
+
**Response time:** We aim to acknowledge within 48 hours and provide a fix timeline within 7 days.
|
|
10
|
+
|
|
11
|
+
**Please include:**
|
|
12
|
+
- Description of the vulnerability
|
|
13
|
+
- Steps to reproduce
|
|
14
|
+
- Potential impact
|
|
15
|
+
- Suggested fix (if any)
|
|
16
|
+
|
|
17
|
+
**Please do NOT:**
|
|
18
|
+
- Open a public GitHub issue for security vulnerabilities
|
|
19
|
+
- Exploit the vulnerability beyond what is needed to demonstrate it
|
|
20
|
+
- Share the vulnerability publicly before we've had time to address it
|
|
21
|
+
|
|
22
|
+
## Scope
|
|
23
|
+
|
|
24
|
+
This policy covers:
|
|
25
|
+
- `agent-passport-system` (TypeScript SDK)
|
|
26
|
+
- `agent-passport-system-mcp` (MCP Server)
|
|
27
|
+
- `mingle-mcp` (Mingle MCP)
|
|
28
|
+
- `api.aeoess.com` (Intent Network API)
|
|
29
|
+
- `mcp.aeoess.com` (Remote MCP endpoint)
|
|
30
|
+
|
|
31
|
+
## Threat Model
|
|
32
|
+
|
|
33
|
+
The Agent Passport System operates under these assumptions:
|
|
34
|
+
|
|
35
|
+
**Trust boundaries:**
|
|
36
|
+
- The SDK is a library. It provides cryptographic primitives but cannot enforce behavior unless deployed as the execution boundary.
|
|
37
|
+
- The ProxyGateway and Agent Context are enforcement boundaries. When all actions route through them, the protocol can enforce policy. Without them, the SDK is advisory.
|
|
38
|
+
- The MCP server enforces within its own session but cannot prevent an agent from bypassing MCP entirely.
|
|
39
|
+
|
|
40
|
+
**Key management:**
|
|
41
|
+
- Ed25519 private keys in `.passport/agent.json` are stored in plaintext. Treat this file like an SSH private key. Do not commit it to version control.
|
|
42
|
+
- Keys generated per MCP session (ephemeral mode) are not persisted and cannot be recovered.
|
|
43
|
+
- Future versions will support OS keychain integration for key storage at rest.
|
|
44
|
+
|
|
45
|
+
**Network trust:**
|
|
46
|
+
- `api.aeoess.com` is a centralized coordination point. It validates Ed25519 signatures on all write operations and enforces rate limits (10 cards/hour per key, 30 searches/hour).
|
|
47
|
+
- The API server can see card content (needs/offers). Expired and removed cards are hard-deleted from the database.
|
|
48
|
+
- All communication uses HTTPS. No credentials are transmitted in URL parameters.
|
|
49
|
+
|
|
50
|
+
**LLM context risks:**
|
|
51
|
+
- IntentCard content from other agents is fed into the user's LLM context. Malicious content in card fields could attempt prompt injection.
|
|
52
|
+
- The `respond_to_intro` tool requires explicit human instruction. However, sophisticated injection in card content could attempt to manipulate the LLM into auto-approving.
|
|
53
|
+
- Mitigation: card content is sanitized before display, and card field lengths are constrained at the API level.
|
|
54
|
+
|
|
55
|
+
## Supported Versions
|
|
56
|
+
|
|
57
|
+
| Package | Supported |
|
|
58
|
+
|---------|-----------|
|
|
59
|
+
| agent-passport-system >= 6.0.0 | ✅ |
|
|
60
|
+
| mingle-mcp >= 1.1.0 | ✅ |
|
|
61
|
+
| Older versions | ❌ |
|
|
62
|
+
|
|
63
|
+
Every `agent-passport-system` version from 1.5.1 through 5.0.3 is unsupported;
|
|
64
|
+
the advisory for 6.0.0, published at
|
|
65
|
+
https://github.com/aeoess/agent-passport-system/security/advisories, describes
|
|
66
|
+
the verification defects they carry.
|
|
67
|
+
|
|
68
|
+
For `agent-passport-system-mcp` support and version information, see the MCP
|
|
69
|
+
server repository's own security policy.
|
|
70
|
+
|
|
71
|
+
## Verifying releases
|
|
72
|
+
|
|
73
|
+
The normal npm release path uses Trusted Publishing (OIDC), which adds npm
|
|
74
|
+
registry provenance without a long-lived publishing token. To verify registry
|
|
75
|
+
signatures and npm provenance attestations in an installed dependency tree:
|
|
76
|
+
|
|
77
|
+
```
|
|
78
|
+
npm audit signatures
|
|
79
|
+
```
|
|
80
|
+
|
|
81
|
+
The immutable `agent-passport-system@5.0.0` version is a dated exception. It
|
|
82
|
+
was published on 2026-09-01 with the registry shasum
|
|
83
|
+
`1f046763cf78b2b86a2966e49a89e9c1d78c9cf8` and a registry signature, but
|
|
84
|
+
without npm provenance. It contains the security remediation released as
|
|
85
|
+
`5.0.0`; the exception concerns release provenance, not the fixed code. A
|
|
86
|
+
GitHub repository artifact attestation over matching tarball bytes is separate
|
|
87
|
+
evidence and cannot add npm provenance to an already published npm version. A
|
|
88
|
+
first attempt at that patch release, tagged `v5.0.1` on 2026-09-02, failed in
|
|
89
|
+
the release workflow before npm publication or GitHub Release creation (a
|
|
90
|
+
release-workflow transport defect, fixed in #139); no `5.0.1` version exists on
|
|
91
|
+
npm. A second attempt, tagged `v5.0.2` on 2026-09-02, passed packaging and
|
|
92
|
+
attestation and failed at GitHub Release creation (a release-workflow
|
|
93
|
+
repository-binding defect, fixed in #141); no `5.0.2` version exists on npm. If
|
|
94
|
+
published through the corrected Trusted Publishing workflow, `5.0.3` is
|
|
95
|
+
intended to be the first post-remediation patch release that restores the
|
|
96
|
+
normal npm provenance property. Version-specific registry metadata is
|
|
97
|
+
available from:
|
|
98
|
+
https://www.npmjs.com/package/agent-passport-system?activeTab=versions
|
|
99
|
+
|
|
100
|
+
## Secrets policy
|
|
101
|
+
|
|
102
|
+
The project holds no long-lived secrets. npm publishing uses OIDC Trusted
|
|
103
|
+
Publishing, so no registry token exists to store or rotate. CI runs on
|
|
104
|
+
ephemeral per-run GITHUB_TOKENs with a read-only default and least-privilege
|
|
105
|
+
grants declared per workflow. Repository push protection blocks accidental
|
|
106
|
+
secret commits. Any future credential gets a named owner, least-privilege
|
|
107
|
+
scope, and rotation on collaborator change or suspected exposure.
|
|
108
|
+
|
|
109
|
+
## Recognition
|
|
110
|
+
|
|
111
|
+
We gratefully acknowledge security researchers who report vulnerabilities responsibly. With your permission, we will credit you in our changelog.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gonka.d.ts","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAGH,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAItG,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IAC3D;;;oDAGgD;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;+DAG2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;yDAMqD;IACrD,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAkCD,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAsBvB;AAED,0EAA0E;AAC1E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1F,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CA4C1J;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GACtE,aAAa,CAoBf;AAED,iEAAiE;AACjE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,cAAc,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAW9E;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,
|
|
1
|
+
{"version":3,"file":"gonka.d.ts","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAGH,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAItG,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IAC3D;;;oDAGgD;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;+DAG2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;yDAMqD;IACrD,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAkCD,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAsBvB;AAED,0EAA0E;AAC1E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1F,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CA4C1J;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GACtE,aAAa,CAoBf;AAED,iEAAiE;AACjE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,cAAc,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAW9E;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,CAAC,GACvD,aAAa,CAoBf"}
|
|
@@ -136,7 +136,13 @@ export function epochToDelegationExpiry(currentEpoch, epochDurationBlocks, epoch
|
|
|
136
136
|
// Assume ~6 second block time (Cosmos SDK default)
|
|
137
137
|
const blocksRemaining = epochDurationBlocks * epochsValid;
|
|
138
138
|
const secondsRemaining = blocksRemaining * 6;
|
|
139
|
-
|
|
139
|
+
// The instant is computed here rather than parsed from anything, so the Date
|
|
140
|
+
// is set from that number instead of constructed from an argument. Same
|
|
141
|
+
// returned instant; this file interprets no timestamp string at all.
|
|
142
|
+
const expiresAtMs = Date.now() + secondsRemaining * 1000;
|
|
143
|
+
const expiresAt = new Date();
|
|
144
|
+
expiresAt.setTime(expiresAtMs);
|
|
145
|
+
return expiresAt;
|
|
140
146
|
}
|
|
141
147
|
/** Validate PoC (Proof-of-Compute) participation receipt */
|
|
142
148
|
export function verifyPoCParticipation(hostAddress, epochId, weight, config) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gonka.js","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAA+B,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AA0DzE,gBAAgB;AAEhB,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EAAE,YAAoB,EAAE,UAAkB,EACzD,MAAc,EAAE,KAAa,EAAE,MAA6B,EAAE,OAAe;IAE7E,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC5F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7D,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAC3B,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;IACxD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE/C,SAAS,WAAW,CAAC,OAAe,EAAE,OAAgB;IACpD,OAAO,GAAG,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED,uBAAuB;AAEvB,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,mBAAmB,KAAK,EAAE,CAAA;IAExC,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,yBAAyB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC3G,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,gCAAgC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACvJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AACrG,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,OAA0F,EAC1F,MAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;IACpE,MAAM,KAAK,GAAG,mBAAmB,OAAO,CAAC,KAAK,EAAE,CAAA;IAEhD,cAAc;IACd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChK,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;IACxD,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,KAAK,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,wBAAwB,KAAK,IAAI,MAAM,CAAC,qBAAqB,wBAAwB,CAAA;YACpG,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1J,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC1C,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,mDAAmD;IACnD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,YAAY,CAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAC/B,wBAAwB,MAAM,CAAC,UAAU,kBAAkB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxF,CAAA;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO;QACL,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE;KACpH,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,cAAsB,EACtB,WAAmB,EACnB,YAAsB,EACtB,MAAuE;IAEvE,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,sBAAsB;SAClC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,YAAY,UAAU,KAAK,cAAc,gBAAgB,WAAW,YAAY,YAAY,CAAC,MAAM,eAAe;SAC5H;QACD,eAAe,EAAE,YAAY;KAC9B,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAwB;IAExB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,SAAS;KAC1B,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,mBAA2B,EAC3B,WAAmB;IAEnB,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,GAAG,WAAW,CAAA;IACzD,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC,CAAA;IAC5C,
|
|
1
|
+
{"version":3,"file":"gonka.js","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAA+B,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AA0DzE,gBAAgB;AAEhB,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EAAE,YAAoB,EAAE,UAAkB,EACzD,MAAc,EAAE,KAAa,EAAE,MAA6B,EAAE,OAAe;IAE7E,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC5F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7D,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAC3B,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;IACxD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE/C,SAAS,WAAW,CAAC,OAAe,EAAE,OAAgB;IACpD,OAAO,GAAG,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED,uBAAuB;AAEvB,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,mBAAmB,KAAK,EAAE,CAAA;IAExC,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,yBAAyB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC3G,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,gCAAgC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACvJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AACrG,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,OAA0F,EAC1F,MAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;IACpE,MAAM,KAAK,GAAG,mBAAmB,OAAO,CAAC,KAAK,EAAE,CAAA;IAEhD,cAAc;IACd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChK,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;IACxD,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,KAAK,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,wBAAwB,KAAK,IAAI,MAAM,CAAC,qBAAqB,wBAAwB,CAAA;YACpG,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1J,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC1C,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,mDAAmD;IACnD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,YAAY,CAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAC/B,wBAAwB,MAAM,CAAC,UAAU,kBAAkB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxF,CAAA;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO;QACL,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE;KACpH,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,cAAsB,EACtB,WAAmB,EACnB,YAAsB,EACtB,MAAuE;IAEvE,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,sBAAsB;SAClC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,YAAY,UAAU,KAAK,cAAc,gBAAgB,WAAW,YAAY,YAAY,CAAC,MAAM,eAAe;SAC5H;QACD,eAAe,EAAE,YAAY;KAC9B,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAwB;IAExB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,SAAS;KAC1B,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,mBAA2B,EAC3B,WAAmB;IAEnB,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,GAAG,WAAW,CAAA;IACzD,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC,CAAA;IAC5C,6EAA6E;IAC7E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAA;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9B,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAe,EACf,MAAc,EACd,MAAwD;IAExD,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC1F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE;YACN,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,oBAAoB;SAChC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wBAAwB,WAAW,WAAW,OAAO,YAAY,MAAM,EAAE;SACnF;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ibac.d.ts","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;
|
|
1
|
+
{"version":3,"file":"ibac.d.ts","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,KAAK,CAAC;QAClB,KAAK,EAAE,SAAS,CAAA;QAChB,UAAU,EAAE,OAAO,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,OAAO,EAAE,aAAa,CAAA;CACvB;AAcD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAM9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EAAE,EACnB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,UAAU,CAeZ;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,EAAE,EACnB,UAAU,EAAE,UAAU,GACrB;IAAE,YAAY,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CA0BnG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE;IACN,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;CACvC,GACA,oBAAoB,CA0DtB"}
|
|
@@ -11,6 +11,7 @@
|
|
|
11
11
|
import { createDelegation, scopeAuthorizes } from '../core/delegation.js';
|
|
12
12
|
import { sign } from '../crypto/keys.js';
|
|
13
13
|
import { canonicalizeForWrite } from '../core/canonical.js';
|
|
14
|
+
import { parseRfc3339 } from '../core/rfc3339.js';
|
|
14
15
|
// ── Verb → scope prefix mapping ──
|
|
15
16
|
const VERB_PREFIX = {
|
|
16
17
|
read: 'data:read',
|
|
@@ -60,8 +61,14 @@ export function evaluateIBACTuples(tuples, delegation) {
|
|
|
60
61
|
const verb = tuple.action.replace(/^tool:/, '');
|
|
61
62
|
const prefix = VERB_PREFIX[verb] || `data:${verb}`;
|
|
62
63
|
const scope = `${prefix}:${tuple.resource}`;
|
|
63
|
-
// Check expiry
|
|
64
|
-
|
|
64
|
+
// Check expiry. An expiry this adapter cannot read is not an expiry it can
|
|
65
|
+
// honour, so it denies on the same branch a real expiry denies on; the reason
|
|
66
|
+
// says which of the two it was.
|
|
67
|
+
const expiry = parseRfc3339(delegation.expiresAt);
|
|
68
|
+
if (!expiry.ok) {
|
|
69
|
+
return { tuple, authorized: false, scope, reason: `Delegation expiresAt is not a readable timestamp (${expiry.reason})` };
|
|
70
|
+
}
|
|
71
|
+
if (expiry.ms <= Date.now()) {
|
|
65
72
|
return { tuple, authorized: false, scope, reason: 'Delegation expired' };
|
|
66
73
|
}
|
|
67
74
|
const authorized = scopeAuthorizes(delegation.scope, scope);
|
|
@@ -84,10 +91,20 @@ export function governIBACIntent(intent, config) {
|
|
|
84
91
|
resource: action.resource,
|
|
85
92
|
constraints: action.constraints,
|
|
86
93
|
}));
|
|
94
|
+
// The delegation has to be usable before any of this is worth evaluating,
|
|
95
|
+
// and the check cannot live inside the per-tuple map: `[].every(...)` is
|
|
96
|
+
// vacuously true, so an intent carrying no actions never reached the expiry
|
|
97
|
+
// test and was signed as a success against a delegation that had expired.
|
|
98
|
+
// Hoisting it changes no answer the per-tuple path ever computed, because
|
|
99
|
+
// that path denies on exactly these two conditions; it supplies one where
|
|
100
|
+
// none was computed at all.
|
|
101
|
+
const delegationExpiry = parseRfc3339(config.delegation.expiresAt);
|
|
102
|
+
const delegationUsable = delegationExpiry.ok && delegationExpiry.ms > Date.now();
|
|
87
103
|
// Evaluate
|
|
88
104
|
const { tupleResults } = evaluateIBACTuples(tuples, config.delegation);
|
|
89
|
-
const allAuthorized = tupleResults.every(r => r.authorized);
|
|
105
|
+
const allAuthorized = delegationUsable && tupleResults.every(r => r.authorized);
|
|
90
106
|
const scopesUsed = tupleResults.map(r => r.scope).join(', ');
|
|
107
|
+
const deniedCount = tupleResults.filter(r => !r.authorized).length;
|
|
91
108
|
// Build signed receipt
|
|
92
109
|
const receiptData = {
|
|
93
110
|
receiptId: `rcpt_ibac_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 6)}`,
|
|
@@ -104,7 +121,11 @@ export function governIBACIntent(intent, config) {
|
|
|
104
121
|
status: allAuthorized ? 'success' : 'failure',
|
|
105
122
|
summary: allAuthorized
|
|
106
123
|
? `All ${tupleResults.length} IBAC tuples authorized`
|
|
107
|
-
:
|
|
124
|
+
: !delegationUsable
|
|
125
|
+
? delegationExpiry.ok
|
|
126
|
+
? 'Delegation expired'
|
|
127
|
+
: `Delegation expiresAt is not a readable timestamp (${delegationExpiry.reason})`
|
|
128
|
+
: `${deniedCount} of ${tupleResults.length} tuples denied`,
|
|
108
129
|
},
|
|
109
130
|
delegationChain: [],
|
|
110
131
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ibac.js","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;
|
|
1
|
+
{"version":3,"file":"ibac.js","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAsCjD,oCAAoC;AAEpC,MAAM,WAAW,GAA2B;IAC1C,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,cAAc;CACvB,CAAA;AAED,uBAAuB;AAEvB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAA;QAChE,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAmB,EACnB,YAAoB,EACpB,QAAgB,EAChB,UAAkB,EAClB,IAAuD;IAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,YAAY;QACzB,KAAK;QACL,UAAU;QACV,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmB,EACnB,UAAsB;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAE3C,2EAA2E;QAC3E,8EAA8E;QAC9E,gCAAgC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,MAAM,CAAC,MAAM,GAAG,EAAE,CAAA;QAC3H,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;QAC1E,CAAC;QAED,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,UAAU;YACvB,CAAC,CAAC,UAAU,KAAK,4BAA4B;YAC7C,CAAC,CAAC,UAAU,KAAK,gCAAgC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAEjF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,YAAY,EAAE,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,MAKC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAgB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,SAAS,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;QACvC,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC,CAAA;IAEH,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAClE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,EAAE,IAAI,gBAAgB,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEhF,WAAW;IACX,MAAM,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAEtE,MAAM,aAAa,GAAG,gBAAgB,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC/E,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAA;IAElE,uBAAuB;IACvB,MAAM,WAAW,GAAqC;QACpD,SAAS,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC3F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,UAAU;SACtB;QACD,MAAM,EAAE;YACN,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC7C,OAAO,EAAE,aAAa;gBACpB,CAAC,CAAC,OAAO,YAAY,CAAC,MAAM,yBAAyB;gBACrD,CAAC,CAAC,CAAC,gBAAgB;oBACjB,CAAC,CAAC,gBAAgB,CAAC,EAAE;wBACnB,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,qDAAqD,gBAAgB,CAAC,MAAM,GAAG;oBACnF,CAAC,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC,MAAM,gBAAgB;SAC/D;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAmB,CAAA;IAE9D,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AACzE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAIzD,OAAO,KAAK,EACV,WAAW,EAA4B,kBAAkB,EAAE,iBAAiB,EAC5E,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAI1B;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,GAAG,kBAAkB,CAE1G;AAyGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,UAAU,EAAE,EACnB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,gBAAqB,GAC7B,eAAe,CA0EjB"}
|
|
@@ -24,6 +24,7 @@
|
|
|
24
24
|
// relying party. Soundness here is by accountability (a keyed caller on the
|
|
25
25
|
// hook), not by construction.
|
|
26
26
|
import { canonicalHashJCSForWrite } from '../../core/canonical-jcs.js';
|
|
27
|
+
import { formatRfc3339 } from '../../core/rfc3339.js';
|
|
27
28
|
import { computeDelegationChainRootForWrite } from '../../decisionReceipt.js';
|
|
28
29
|
import { createDelegationRef } from '../../core/reanchor.js';
|
|
29
30
|
import { sign, publicKeyFromPrivate } from '../../crypto/keys.js';
|
|
@@ -38,7 +39,12 @@ export function verifiedIdJagGrant(grant, verification) {
|
|
|
38
39
|
return { grant, verification };
|
|
39
40
|
}
|
|
40
41
|
function numericDateToIso(seconds) {
|
|
41
|
-
|
|
42
|
+
// Emission, not interpretation: a NumericDate from the caller-verified grant
|
|
43
|
+
// is rendered into the descriptor. formatRfc3339 is byte-identical to
|
|
44
|
+
// toISOString() across the representable range and takes a number, so no
|
|
45
|
+
// string can be reparsed here, and like toISOString() it raises RangeError on
|
|
46
|
+
// an instant outside that range.
|
|
47
|
+
return formatRfc3339(seconds * 1000);
|
|
42
48
|
}
|
|
43
49
|
/** Project the scope claim to APS scope tokens. Baseline only; RAR never widens it. */
|
|
44
50
|
function mapScopeBaseline(claims) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,YAAY;AACZ,8EAA8E;AAC9E,uEAAuE;AACvE,wEAAwE;AACxE,+EAA+E;AAC/E,iEAAiE;AACjE,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,gCAAgC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAA;AAOnB,cAAc,YAAY,CAAA;AAE1B,MAAM,eAAe,GAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAEtG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,YAA+B;IACpF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAmC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,YAAY;AACZ,8EAA8E;AAC9E,uEAAuE;AACvE,wEAAwE;AACxE,+EAA+E;AAC/E,iEAAiE;AACjE,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,gCAAgC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAA;AAOnB,cAAc,YAAY,CAAA;AAE1B,MAAM,eAAe,GAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAEtG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,YAA+B;IACpF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAmC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,6EAA6E;IAC7E,sEAAsE;IACtE,yEAAyE;IACzE,8EAA8E;IAC9E,iCAAiC;IACjC,OAAO,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,OAAmC,EACnC,aAAuB;IAEvB,MAAM,WAAW,GAAsB,EAAE,CAAA;IACzC,IAAI,UAA8B,CAAA;IAClC,IAAI,cAAsD,CAAA;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,IAAI,6DAA6D,EAAE,CAAC,CAAA;YACpJ,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,UAAU,GAAG,MAAM,CAAA;oBACnB,cAAc,GAAG,UAAU,CAAA;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,aAAa,IAAI,oBAAoB,MAAM,4DAA4D,EAAE,CAAC,CAAA;YAC5K,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,aAAa,IAAI,8EAA8E,EAAE,CAAC,CAAA;QACrK,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAyG,EAAE,WAAW,EAAE,CAAA;IACpI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAA;QAC9B,MAAM,CAAC,cAAc,GAAG,cAAc,CAAA;IACxC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB,EAAE,QAAiB;IAChE,MAAM,GAAG,GAAuB,EAAE,CAAA;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2JAA2J;AAC3J,SAAS,YAAY,CAAC,GAAwC,EAAE,KAAmB;IACjF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACxD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACrF,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC7G,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC3F,OAAO,EAAE,MAAM,EAAE,2CAA2C,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AAClF,CAAC;AAED,uKAAuK;AACvK,SAAS,sBAAsB,CAAC,MAAmB;IACjD,MAAM,GAAG,GAA2B;QAClC,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,WAAW;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IACjE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,KAAmB,EACnB,gBAAwB,EACxB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;IAE1C,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,2CAA2C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,8EAA8E,CAAC,CAAA;IACpI,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAA8C,CAAC,CAAA;IAE/F,MAAM,OAAO,GAAG,kBAAkB,cAAc,OAAO,UAAU,EAAE,CAAA;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IAE9D,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,uBAAuB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAA;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAE3C,MAAM,UAAU,GAAoB;QAClC,KAAK,EAAE,WAAW;QAClB,cAAc;QACd,sBAAsB,EAAE,QAAQ;QAChC,mBAAmB,EAAE,kCAAkC,CAAC,KAAK,CAAC;QAC9D,KAAK;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACjD,YAAY,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;QAC/F,WAAW,EAAE,MAAM,CAAC,SAAS;QAC7B,KAAK;QACL,uBAAuB;QACvB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC;QACvC,eAAe,EAAE;YACf,WAAW,EAAE,yBAAyB;YACtC,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC1D;QACD,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACvD,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;QAClD,kBAAkB,EAAE;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,iCAAiC;gBACtC,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,eAAe;gBAC3B,kBAAkB,EAAE,UAAU;gBAC9B,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,SAAS;aACvB;YACD,OAAO;YACP,SAAS;YACT,eAAe;YACf,UAAU;YACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,aAAa,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;QAC7E,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE;KACxD,CAAA;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAA;QACtC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAA;IAChD,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}
|
package/dist/src/cli/index.js
CHANGED
|
@@ -886,9 +886,11 @@ function cmdStatus() {
|
|
|
886
886
|
console.log('');
|
|
887
887
|
console.log(` Agent: ${agent.agentId}`);
|
|
888
888
|
console.log(` Key: ${agent.publicKey.slice(0, 16)}...`);
|
|
889
|
-
// Verify identity
|
|
890
|
-
|
|
891
|
-
|
|
889
|
+
// Verify identity. This is a local status line, not a gate: it reports
|
|
890
|
+
// whether the passport's own signature holds, which is integrity, so it
|
|
891
|
+
// names the opt-in and labels the answer for what it is.
|
|
892
|
+
const idCheck = verifyPassport(agent.passport, { allowSelfSigned: true });
|
|
893
|
+
console.log(` Identity: ${idCheck.valid ? '✓ signature valid (self-signed, no trust anchor)' : '✗ INVALID'}`);
|
|
892
894
|
// Check attestation
|
|
893
895
|
if (agent.attestation) {
|
|
894
896
|
const attCheck = verifyAttestation(agent.attestation);
|