agent-passport-system 5.0.3 → 6.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (191) hide show
  1. package/README.md +10 -8
  2. package/SECURITY.md +113 -0
  3. package/dist/src/adapters/gonka.d.ts.map +1 -1
  4. package/dist/src/adapters/gonka.js +7 -1
  5. package/dist/src/adapters/gonka.js.map +1 -1
  6. package/dist/src/adapters/ibac.d.ts.map +1 -1
  7. package/dist/src/adapters/ibac.js +25 -4
  8. package/dist/src/adapters/ibac.js.map +1 -1
  9. package/dist/src/adapters/oauth-id-jag/index.d.ts.map +1 -1
  10. package/dist/src/adapters/oauth-id-jag/index.js +7 -1
  11. package/dist/src/adapters/oauth-id-jag/index.js.map +1 -1
  12. package/dist/src/cli/index.js +5 -3
  13. package/dist/src/cli/index.js.map +1 -1
  14. package/dist/src/contract.d.ts.map +1 -1
  15. package/dist/src/contract.js +4 -1
  16. package/dist/src/contract.js.map +1 -1
  17. package/dist/src/core/anchor-state.d.ts.map +1 -1
  18. package/dist/src/core/anchor-state.js +8 -1
  19. package/dist/src/core/anchor-state.js.map +1 -1
  20. package/dist/src/core/attestation.d.ts.map +1 -1
  21. package/dist/src/core/attestation.js +59 -8
  22. package/dist/src/core/attestation.js.map +1 -1
  23. package/dist/src/core/behavioral-memory.d.ts.map +1 -1
  24. package/dist/src/core/behavioral-memory.js +9 -5
  25. package/dist/src/core/behavioral-memory.js.map +1 -1
  26. package/dist/src/core/bilateral-receipt.d.ts.map +1 -1
  27. package/dist/src/core/bilateral-receipt.js +33 -14
  28. package/dist/src/core/bilateral-receipt.js.map +1 -1
  29. package/dist/src/core/canonical.d.ts.map +1 -1
  30. package/dist/src/core/canonical.js +34 -6
  31. package/dist/src/core/canonical.js.map +1 -1
  32. package/dist/src/core/charter.d.ts.map +1 -1
  33. package/dist/src/core/charter.js +13 -3
  34. package/dist/src/core/charter.js.map +1 -1
  35. package/dist/src/core/commerce.d.ts +4 -1
  36. package/dist/src/core/commerce.d.ts.map +1 -1
  37. package/dist/src/core/commerce.js +8 -4
  38. package/dist/src/core/commerce.js.map +1 -1
  39. package/dist/src/core/coordination.d.ts.map +1 -1
  40. package/dist/src/core/coordination.js +14 -8
  41. package/dist/src/core/coordination.js.map +1 -1
  42. package/dist/src/core/credential-request.d.ts +25 -8
  43. package/dist/src/core/credential-request.d.ts.map +1 -1
  44. package/dist/src/core/credential-request.js +48 -102
  45. package/dist/src/core/credential-request.js.map +1 -1
  46. package/dist/src/core/cross-chain.d.ts +0 -3
  47. package/dist/src/core/cross-chain.d.ts.map +1 -1
  48. package/dist/src/core/cross-chain.js +49 -16
  49. package/dist/src/core/cross-chain.js.map +1 -1
  50. package/dist/src/core/data-lifecycle.d.ts.map +1 -1
  51. package/dist/src/core/data-lifecycle.js +9 -2
  52. package/dist/src/core/data-lifecycle.js.map +1 -1
  53. package/dist/src/core/data-source.d.ts.map +1 -1
  54. package/dist/src/core/data-source.js +26 -10
  55. package/dist/src/core/data-source.js.map +1 -1
  56. package/dist/src/core/decision-semantics.d.ts +37 -2
  57. package/dist/src/core/decision-semantics.d.ts.map +1 -1
  58. package/dist/src/core/decision-semantics.js +151 -12
  59. package/dist/src/core/decision-semantics.js.map +1 -1
  60. package/dist/src/core/delegation.d.ts.map +1 -1
  61. package/dist/src/core/delegation.js +34 -18
  62. package/dist/src/core/delegation.js.map +1 -1
  63. package/dist/src/core/did-uri.d.ts +3 -2
  64. package/dist/src/core/did-uri.d.ts.map +1 -1
  65. package/dist/src/core/did-uri.js +22 -4
  66. package/dist/src/core/did-uri.js.map +1 -1
  67. package/dist/src/core/escalation.d.ts.map +1 -1
  68. package/dist/src/core/escalation.js +32 -9
  69. package/dist/src/core/escalation.js.map +1 -1
  70. package/dist/src/core/evidence-bundle.d.ts.map +1 -1
  71. package/dist/src/core/evidence-bundle.js +11 -4
  72. package/dist/src/core/evidence-bundle.js.map +1 -1
  73. package/dist/src/core/execution-attestation.d.ts.map +1 -1
  74. package/dist/src/core/execution-attestation.js +56 -7
  75. package/dist/src/core/execution-attestation.js.map +1 -1
  76. package/dist/src/core/execution-envelope.d.ts +85 -13
  77. package/dist/src/core/execution-envelope.d.ts.map +1 -1
  78. package/dist/src/core/execution-envelope.js +171 -29
  79. package/dist/src/core/execution-envelope.js.map +1 -1
  80. package/dist/src/core/feasibility.d.ts.map +1 -1
  81. package/dist/src/core/feasibility.js +35 -4
  82. package/dist/src/core/feasibility.js.map +1 -1
  83. package/dist/src/core/federation.d.ts.map +1 -1
  84. package/dist/src/core/federation.js +4 -1
  85. package/dist/src/core/federation.js.map +1 -1
  86. package/dist/src/core/freshness.d.ts +4 -0
  87. package/dist/src/core/freshness.d.ts.map +1 -1
  88. package/dist/src/core/freshness.js +9 -2
  89. package/dist/src/core/freshness.js.map +1 -1
  90. package/dist/src/core/governance-block.d.ts +38 -3
  91. package/dist/src/core/governance-block.d.ts.map +1 -1
  92. package/dist/src/core/governance-block.js +72 -22
  93. package/dist/src/core/governance-block.js.map +1 -1
  94. package/dist/src/core/governance.d.ts.map +1 -1
  95. package/dist/src/core/governance.js +51 -10
  96. package/dist/src/core/governance.js.map +1 -1
  97. package/dist/src/core/identity-bridge.d.ts.map +1 -1
  98. package/dist/src/core/identity-bridge.js +15 -2
  99. package/dist/src/core/identity-bridge.js.map +1 -1
  100. package/dist/src/core/intent.d.ts +6 -0
  101. package/dist/src/core/intent.d.ts.map +1 -1
  102. package/dist/src/core/intent.js +4 -1
  103. package/dist/src/core/intent.js.map +1 -1
  104. package/dist/src/core/key-rotation.d.ts.map +1 -1
  105. package/dist/src/core/key-rotation.js +20 -6
  106. package/dist/src/core/key-rotation.js.map +1 -1
  107. package/dist/src/core/obligations.d.ts.map +1 -1
  108. package/dist/src/core/obligations.js +28 -5
  109. package/dist/src/core/obligations.js.map +1 -1
  110. package/dist/src/core/passport.d.ts.map +1 -1
  111. package/dist/src/core/passport.js +26 -6
  112. package/dist/src/core/passport.js.map +1 -1
  113. package/dist/src/core/policy.d.ts +71 -1
  114. package/dist/src/core/policy.d.ts.map +1 -1
  115. package/dist/src/core/policy.js +135 -12
  116. package/dist/src/core/policy.js.map +1 -1
  117. package/dist/src/core/principal.d.ts.map +1 -1
  118. package/dist/src/core/principal.js +17 -4
  119. package/dist/src/core/principal.js.map +1 -1
  120. package/dist/src/core/reputation-authority.d.ts.map +1 -1
  121. package/dist/src/core/reputation-authority.js +27 -11
  122. package/dist/src/core/reputation-authority.js.map +1 -1
  123. package/dist/src/core/reserve.d.ts.map +1 -1
  124. package/dist/src/core/reserve.js +12 -4
  125. package/dist/src/core/reserve.js.map +1 -1
  126. package/dist/src/core/rfc3339.d.ts +72 -0
  127. package/dist/src/core/rfc3339.d.ts.map +1 -0
  128. package/dist/src/core/rfc3339.js +206 -0
  129. package/dist/src/core/rfc3339.js.map +1 -0
  130. package/dist/src/core/routing.d.ts.map +1 -1
  131. package/dist/src/core/routing.js +7 -2
  132. package/dist/src/core/routing.js.map +1 -1
  133. package/dist/src/core/time.d.ts.map +1 -1
  134. package/dist/src/core/time.js +34 -10
  135. package/dist/src/core/time.js.map +1 -1
  136. package/dist/src/core/transactional.d.ts.map +1 -1
  137. package/dist/src/core/transactional.js +13 -3
  138. package/dist/src/core/transactional.js.map +1 -1
  139. package/dist/src/core/trust-adapters.d.ts.map +1 -1
  140. package/dist/src/core/trust-adapters.js +2 -1
  141. package/dist/src/core/trust-adapters.js.map +1 -1
  142. package/dist/src/core/values.d.ts.map +1 -1
  143. package/dist/src/core/values.js +12 -4
  144. package/dist/src/core/values.js.map +1 -1
  145. package/dist/src/core/vc-proof.d.ts +74 -0
  146. package/dist/src/core/vc-proof.d.ts.map +1 -0
  147. package/dist/src/core/vc-proof.js +142 -0
  148. package/dist/src/core/vc-proof.js.map +1 -0
  149. package/dist/src/core/vc-wrapper.d.ts +76 -7
  150. package/dist/src/core/vc-wrapper.d.ts.map +1 -1
  151. package/dist/src/core/vc-wrapper.js +181 -75
  152. package/dist/src/core/vc-wrapper.js.map +1 -1
  153. package/dist/src/core/vc.d.ts +96 -11
  154. package/dist/src/core/vc.d.ts.map +1 -1
  155. package/dist/src/core/vc.js +177 -49
  156. package/dist/src/core/vc.js.map +1 -1
  157. package/dist/src/index.d.ts +5 -2
  158. package/dist/src/index.d.ts.map +1 -1
  159. package/dist/src/index.js +1 -1
  160. package/dist/src/index.js.map +1 -1
  161. package/dist/src/types/decision-semantics.d.ts +19 -0
  162. package/dist/src/types/decision-semantics.d.ts.map +1 -1
  163. package/dist/src/types/did.d.ts +9 -0
  164. package/dist/src/types/did.d.ts.map +1 -1
  165. package/dist/src/types/execution-envelope.d.ts +33 -3
  166. package/dist/src/types/execution-envelope.d.ts.map +1 -1
  167. package/dist/src/types/passport.d.ts +6 -5
  168. package/dist/src/types/passport.d.ts.map +1 -1
  169. package/dist/src/types/passport.js.map +1 -1
  170. package/dist/src/v2/attribution-consent/types.d.ts.map +1 -1
  171. package/dist/src/v2/attribution-consent/types.js +22 -4
  172. package/dist/src/v2/attribution-consent/types.js.map +1 -1
  173. package/dist/src/v2/attribution-consent/verify.d.ts.map +1 -1
  174. package/dist/src/v2/attribution-consent/verify.js +38 -0
  175. package/dist/src/v2/attribution-consent/verify.js.map +1 -1
  176. package/dist/src/v2/offline-verifier/context.d.ts +1 -1
  177. package/dist/src/v2/offline-verifier/context.d.ts.map +1 -1
  178. package/dist/src/v2/offline-verifier/context.js +20 -1
  179. package/dist/src/v2/offline-verifier/context.js.map +1 -1
  180. package/dist/src/verification/trust-anchors.d.ts.map +1 -1
  181. package/dist/src/verification/trust-anchors.js +9 -0
  182. package/dist/src/verification/trust-anchors.js.map +1 -1
  183. package/dist/src/verification/trust-posture.d.ts.map +1 -1
  184. package/dist/src/verification/trust-posture.js +19 -12
  185. package/dist/src/verification/trust-posture.js.map +1 -1
  186. package/dist/src/verification/verify.d.ts +5 -0
  187. package/dist/src/verification/verify.d.ts.map +1 -1
  188. package/dist/src/verification/verify.js +54 -12
  189. package/dist/src/verification/verify.js.map +1 -1
  190. package/docs/verification-boundary.md +14 -0
  191. package/package.json +7 -4
package/README.md CHANGED
@@ -1,12 +1,12 @@
1
1
  <p align="center">
2
- <img src="docs/assets/banner-hero.png" alt="Agent Passport System banner. Governance infrastructure for the agent economy. Cryptographic identity, signed action receipts, beneficiary attribution." width="100%">
2
+ <img src="docs/assets/banner-hero.png" alt="Agent Passport System banner. Verifiable agent authority and action evidence. Cryptographic identity, scoped delegation, signed action receipts." width="100%">
3
3
  </p>
4
4
 
5
5
  APS lets a person or company give an AI agent limited authority to act on its behalf, and produces verifiable proof of what the agent does with it. Open protocol, Apache 2.0.
6
6
 
7
7
  [![npm version](https://img.shields.io/npm/v/agent-passport-system)](https://www.npmjs.com/package/agent-passport-system)
8
8
  [![license](https://img.shields.io/npm/l/agent-passport-system)](https://github.com/aeoess/agent-passport-system/blob/main/LICENSE)
9
- [![tests](https://img.shields.io/badge/tests-4499%20passing%20%2F%204500-brightgreen)](https://github.com/aeoess/agent-passport-system)
9
+ [![tests](https://github.com/aeoess/agent-passport-system/actions/workflows/tests.yml/badge.svg)](https://github.com/aeoess/agent-passport-system/actions/workflows/tests.yml)
10
10
  [![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.18749779.svg)](https://doi.org/10.5281/zenodo.18749779)
11
11
  [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13536/badge)](https://www.bestpractices.dev/projects/13536)
12
12
  [![OpenSSF Baseline](https://www.bestpractices.dev/projects/13536/baseline)](https://www.bestpractices.dev/projects/13536)
@@ -38,7 +38,7 @@ flowchart LR
38
38
  npm install agent-passport-system
39
39
  ```
40
40
 
41
- Also implemented in [Python](https://pypi.org/project/agent-passport-system/) and [Go](https://pkg.go.dev/github.com/aeoess/agent-passport-go), byte-parity-checked against this TypeScript reference.
41
+ Also implemented in [Python](https://pypi.org/project/agent-passport-system/), [Go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) and [Rust](https://crates.io/crates/agent-passport-system), each checked against this TypeScript reference through the conformance suite.
42
42
 
43
43
  Verify any receipt or evidence bundle in your browser at [agent-passport.org/verify.html](https://agent-passport.org/verify.html) (runs locally, nothing is uploaded). Machine-readable docs for agents are at [agent-passport.org/llms.txt](https://agent-passport.org/llms.txt).
44
44
 
@@ -74,7 +74,7 @@ What ships in every deployment.
74
74
  Every primitive in this README carries one of three labels so you know how much weight it can bear today.
75
75
 
76
76
  - **Canonical** -- stable, signed-bytes frozen, covered by conformance fixtures. Breaking these would break cross-implementation verification. Build on them.
77
- - **Production-Extension** -- shipped and tested, optional, additive to the canonical core. Safe in production; the surface may still grow.
77
+ - **Stable extension** -- shipped and tested, optional, additive to the canonical core; the surface may still grow.
78
78
  - **Experimental** -- published for review and tested, but the shape may change. Pin a version before depending on it.
79
79
 
80
80
  Where enforcement sits:
@@ -249,9 +249,10 @@ The composition contract specifies how a verifier MUST cross-check per-request s
249
249
 
250
250
  ## Numbers
251
251
 
252
- 4,500 tests. 8 protocol layers. Framework adapters for CrewAI, LangChain, ADK, A2A, MCP, OpenShell, IBAC, Gonka. Gateway evaluation under 2ms. Zero heavy dependencies. Apache-2.0.
253
-
254
- The test count is one number derived from the suite, not three guesses. The badge above, this section, and the `package.json` description all carry the same `4,500`, which is the `tests` total reported by `npm test`. When the suite grows, re-run `npm test`, read the `tests` line, and update all three to match.
252
+ The test total is reported by `npm test` and by the tests badge above; it is not written into
253
+ prose here or in `package.json`, so it cannot drift. Framework adapters for CrewAI, LangChain,
254
+ ADK, A2A, MCP, OpenShell, IBAC, Gonka. Gateway evaluation under 2ms in the benchmarks under
255
+ `benchmarks/`. Zero heavy dependencies. Apache-2.0.
255
256
 
256
257
  ## Papers
257
258
 
@@ -269,6 +270,7 @@ The test count is one number derived from the suite, not three guesses. The badg
269
270
  ## Security and conformance
270
271
 
271
272
  - [Threat model](/THREAT_MODEL.md) -- actors, assets, trust boundaries, what APS prevents and what it does not, verifier responsibilities.
273
+ - [Verification boundary](https://github.com/aeoess/agent-passport-system/blob/main/docs/verification-boundary.md) -- which verification APIs establish authority from caller-supplied trust, and the trust input each one takes.
272
274
  - [Conformance fixtures](tests/conformance/README.md) -- golden valid and negative receipt fixtures every verifier must agree on.
273
275
  - [Payment Safety Profile](docs/PAYMENT-SAFETY-PROFILE.md) -- the mandatory profile for agent-initiated payments.
274
276
  - [MCP Authorization Profile](docs/MCP-AUTHORIZATION-PROFILE.md) -- aps-mcp-1 pre-dispatch authorization for `tools/call`, including the mcp-use adapter.
@@ -284,6 +286,6 @@ The test count is one number derived from the suite, not three guesses. The badg
284
286
  - [aeoess.com](https://agent-passport.org) -- Protocol home
285
287
  - [llms-full.txt](https://aeoess.com/llms-full.txt) -- Complete reference for AI agents
286
288
  - [Dev log](https://aeoess.com/blog.html) -- Day-by-day build record
287
- - [npm](https://www.npmjs.com/package/agent-passport-system) · [PyPI](https://pypi.org/project/agent-passport-system/) · [MCP](https://www.npmjs.com/package/agent-passport-system-mcp)
289
+ - [npm](https://www.npmjs.com/package/agent-passport-system) · [PyPI](https://pypi.org/project/agent-passport-system/) · [crates.io](https://crates.io/crates/agent-passport-system) · [Go](https://pkg.go.dev/github.com/aeoess/agent-passport-go) · [MCP](https://www.npmjs.com/package/agent-passport-system-mcp)
288
290
 
289
291
  Copyright 2026 Tymofii Pidlisnyi. Apache-2.0.
package/SECURITY.md ADDED
@@ -0,0 +1,113 @@
1
+ # Security Policy
2
+
3
+ ## Reporting Vulnerabilities
4
+
5
+ If you discover a security vulnerability in the Agent Passport System, please report it responsibly.
6
+
7
+ **Report privately:** https://github.com/aeoess/agent-passport-system/security/advisories
8
+ **Email:** security@aeoess.com
9
+ **Response time:** We aim to acknowledge within 48 hours and provide a fix timeline within 7 days.
10
+
11
+ **Please include:**
12
+ - Description of the vulnerability
13
+ - Steps to reproduce
14
+ - Potential impact
15
+ - Suggested fix (if any)
16
+
17
+ **Please do NOT:**
18
+ - Open a public GitHub issue for security vulnerabilities
19
+ - Exploit the vulnerability beyond what is needed to demonstrate it
20
+ - Share the vulnerability publicly before we've had time to address it
21
+
22
+ ## Scope
23
+
24
+ This policy covers:
25
+ - `agent-passport-system` (TypeScript SDK)
26
+ - `agent-passport-system-mcp` (MCP Server)
27
+ - `mingle-mcp` (Mingle MCP)
28
+ - `api.aeoess.com` (Intent Network API)
29
+ - `mcp.aeoess.com` (Remote MCP endpoint)
30
+
31
+ ## Threat Model
32
+
33
+ The Agent Passport System operates under these assumptions:
34
+
35
+ **Trust boundaries:**
36
+ - The SDK is a library. It provides cryptographic primitives but cannot enforce behavior unless deployed as the execution boundary.
37
+ - The ProxyGateway and Agent Context are enforcement boundaries. When all actions route through them, the protocol can enforce policy. Without them, the SDK is advisory.
38
+ - The MCP server enforces within its own session but cannot prevent an agent from bypassing MCP entirely.
39
+
40
+ **Key management:**
41
+ - Ed25519 private keys in `.passport/agent.json` are stored in plaintext. Treat this file like an SSH private key. Do not commit it to version control.
42
+ - Keys generated per MCP session (ephemeral mode) are not persisted and cannot be recovered.
43
+ - Future versions will support OS keychain integration for key storage at rest.
44
+
45
+ **Network trust:**
46
+ - `api.aeoess.com` is a centralized coordination point. It validates Ed25519 signatures on all write operations and enforces rate limits (10 cards/hour per key, 30 searches/hour).
47
+ - The API server can see card content (needs/offers). Expired and removed cards are hard-deleted from the database.
48
+ - All communication uses HTTPS. No credentials are transmitted in URL parameters.
49
+
50
+ **LLM context risks:**
51
+ - IntentCard content from other agents is fed into the user's LLM context. Malicious content in card fields could attempt prompt injection.
52
+ - The `respond_to_intro` tool requires explicit human instruction. However, sophisticated injection in card content could attempt to manipulate the LLM into auto-approving.
53
+ - Mitigation: card content is sanitized before display, and card field lengths are constrained at the API level.
54
+
55
+ ## Supported Versions
56
+
57
+ | Package | Supported |
58
+ |---------|-----------|
59
+ | agent-passport-system >= 6.0.0 | ✅ |
60
+ | agent-passport-system-mcp >= 6.0.0 | ✅ |
61
+ | mingle-mcp >= 1.1.0 | ✅ |
62
+ | Older versions | ❌ |
63
+
64
+ Every `agent-passport-system` version from 1.5.1 through 5.0.3 is unsupported;
65
+ the 6.0.0 advisory, GHSA-r2fw-x6mg-f6h8, published at
66
+ https://github.com/aeoess/agent-passport-system/security/advisories, describes
67
+ the verification defects they carry.
68
+
69
+ `agent-passport-system-mcp` 6.0.0 and later target this SDK line; MCP releases
70
+ before 6.0.0 target SDK 5.x. The MCP server repository carries its own security
71
+ policy for the server itself.
72
+
73
+ ## Verifying releases
74
+
75
+ The normal npm release path uses Trusted Publishing (OIDC), which adds npm
76
+ registry provenance without a long-lived publishing token. To verify registry
77
+ signatures and npm provenance attestations in an installed dependency tree:
78
+
79
+ ```
80
+ npm audit signatures
81
+ ```
82
+
83
+ The immutable `agent-passport-system@5.0.0` version is a dated exception. It
84
+ was published on 2026-09-01 with the registry shasum
85
+ `1f046763cf78b2b86a2966e49a89e9c1d78c9cf8` and a registry signature, but
86
+ without npm provenance. It contains the security remediation released as
87
+ `5.0.0`; the exception concerns release provenance, not the fixed code. A
88
+ GitHub repository artifact attestation over matching tarball bytes is separate
89
+ evidence and cannot add npm provenance to an already published npm version. A
90
+ first attempt at that patch release, tagged `v5.0.1` on 2026-09-02, failed in
91
+ the release workflow before npm publication or GitHub Release creation (a
92
+ release-workflow transport defect, fixed in #139); no `5.0.1` version exists on
93
+ npm. A second attempt, tagged `v5.0.2` on 2026-09-02, passed packaging and
94
+ attestation and failed at GitHub Release creation (a release-workflow
95
+ repository-binding defect, fixed in #141); no `5.0.2` version exists on npm. If
96
+ published through the corrected Trusted Publishing workflow, `5.0.3` is
97
+ intended to be the first post-remediation patch release that restores the
98
+ normal npm provenance property. Version-specific registry metadata is
99
+ available from:
100
+ https://www.npmjs.com/package/agent-passport-system?activeTab=versions
101
+
102
+ ## Secrets policy
103
+
104
+ The project holds no long-lived secrets. npm publishing uses OIDC Trusted
105
+ Publishing, so no registry token exists to store or rotate. CI runs on
106
+ ephemeral per-run GITHUB_TOKENs with a read-only default and least-privilege
107
+ grants declared per workflow. Repository push protection blocks accidental
108
+ secret commits. Any future credential gets a named owner, least-privilege
109
+ scope, and rotation on collaborator change or suspected exposure.
110
+
111
+ ## Recognition
112
+
113
+ We gratefully acknowledge security researchers who report vulnerabilities responsibly. With your permission, we will credit you in our changelog.
@@ -1 +1 @@
1
- {"version":3,"file":"gonka.d.ts","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAGH,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAItG,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IAC3D;;;oDAGgD;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;+DAG2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;yDAMqD;IACrD,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAkCD,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAsBvB;AAED,0EAA0E;AAC1E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1F,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CA4C1J;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GACtE,aAAa,CAoBf;AAED,iEAAiE;AACjE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,cAAc,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAW9E;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAKN;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,CAAC,GACvD,aAAa,CAoBf"}
1
+ {"version":3,"file":"gonka.d.ts","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAGH,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAItG,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAA;IAC3D;;;oDAGgD;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB;;;+DAG2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;yDAMqD;IACrD,UAAU,CAAC,EAAE,sBAAsB,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,OAAO,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CACd;AAkCD,iEAAiE;AACjE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAsBvB;AAED,0EAA0E;AAC1E,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1F,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,OAAO,EAAE,qBAAqB,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CA4C1J;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,GAAG,YAAY,CAAC,GACtE,aAAa,CAoBf;AAED,iEAAiE;AACjE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,cAAc,GACvB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAW9E;AAED,0DAA0D;AAC1D,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAWN;AAED,4DAA4D;AAC5D,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,YAAY,CAAC,GACvD,aAAa,CAoBf"}
@@ -136,7 +136,13 @@ export function epochToDelegationExpiry(currentEpoch, epochDurationBlocks, epoch
136
136
  // Assume ~6 second block time (Cosmos SDK default)
137
137
  const blocksRemaining = epochDurationBlocks * epochsValid;
138
138
  const secondsRemaining = blocksRemaining * 6;
139
- return new Date(Date.now() + secondsRemaining * 1000);
139
+ // The instant is computed here rather than parsed from anything, so the Date
140
+ // is set from that number instead of constructed from an argument. Same
141
+ // returned instant; this file interprets no timestamp string at all.
142
+ const expiresAtMs = Date.now() + secondsRemaining * 1000;
143
+ const expiresAt = new Date();
144
+ expiresAt.setTime(expiresAtMs);
145
+ return expiresAt;
140
146
  }
141
147
  /** Validate PoC (Proof-of-Compute) participation receipt */
142
148
  export function verifyPoCParticipation(hostAddress, epochId, weight, config) {
@@ -1 +1 @@
1
- {"version":3,"file":"gonka.js","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAA+B,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AA0DzE,gBAAgB;AAEhB,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EAAE,YAAoB,EAAE,UAAkB,EACzD,MAAc,EAAE,KAAa,EAAE,MAA6B,EAAE,OAAe;IAE7E,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC5F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7D,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAC3B,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;IACxD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE/C,SAAS,WAAW,CAAC,OAAe,EAAE,OAAgB;IACpD,OAAO,GAAG,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED,uBAAuB;AAEvB,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,mBAAmB,KAAK,EAAE,CAAA;IAExC,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,yBAAyB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC3G,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,gCAAgC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACvJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AACrG,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,OAA0F,EAC1F,MAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;IACpE,MAAM,KAAK,GAAG,mBAAmB,OAAO,CAAC,KAAK,EAAE,CAAA;IAEhD,cAAc;IACd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChK,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;IACxD,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,KAAK,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,wBAAwB,KAAK,IAAI,MAAM,CAAC,qBAAqB,wBAAwB,CAAA;YACpG,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1J,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC1C,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,mDAAmD;IACnD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,YAAY,CAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAC/B,wBAAwB,MAAM,CAAC,UAAU,kBAAkB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxF,CAAA;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO;QACL,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE;KACpH,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,cAAsB,EACtB,WAAmB,EACnB,YAAsB,EACtB,MAAuE;IAEvE,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,sBAAsB;SAClC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,YAAY,UAAU,KAAK,cAAc,gBAAgB,WAAW,YAAY,YAAY,CAAC,MAAM,eAAe;SAC5H;QACD,eAAe,EAAE,YAAY;KAC9B,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAwB;IAExB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,SAAS;KAC1B,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,mBAA2B,EAC3B,WAAmB;IAEnB,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,GAAG,WAAW,CAAA;IACzD,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC,CAAA;IAC5C,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAA;AACvD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAe,EACf,MAAc,EACd,MAAwD;IAExD,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC1F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE;YACN,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,oBAAoB;SAChC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wBAAwB,WAAW,WAAW,OAAO,YAAY,MAAM,EAAE;SACnF;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC"}
1
+ {"version":3,"file":"gonka.js","sourceRoot":"","sources":["../../../src/adapters/gonka.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAA+B,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AA0DzE,gBAAgB;AAEhB,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,YAAY,CACnB,OAAe,EAAE,YAAoB,EAAE,UAAkB,EACzD,MAAc,EAAE,KAAa,EAAE,MAA6B,EAAE,OAAe;IAE7E,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC5F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE;QAC7D,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAC3B,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;IACxD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,+CAA+C;AAC/C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;AAE/C,SAAS,WAAW,CAAC,OAAe,EAAE,OAAgB;IACpD,OAAO,GAAG,OAAO,IAAI,OAAO,IAAI,SAAS,EAAE,CAAA;AAC7C,CAAC;AAED,uBAAuB;AAEvB,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,KAAa,EACb,MAAuB;IAEvB,MAAM,KAAK,GAAG,mBAAmB,KAAK,EAAE,CAAA;IAExC,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC/G,CAAC;IAED,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACjE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAChH,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,yBAAyB,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC3G,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,gCAAgC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IACvJ,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;AACrG,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,OAA0F,EAC1F,MAAuB;IAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAA;IACpE,MAAM,KAAK,GAAG,mBAAmB,OAAO,CAAC,KAAK,EAAE,CAAA;IAEhD,cAAc;IACd,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChK,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;IACxD,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,KAAK,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,wBAAwB,KAAK,IAAI,MAAM,CAAC,qBAAqB,wBAAwB,CAAA;YACpG,IAAI,MAAM,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1J,IAAI,MAAM,CAAC,SAAS;gBAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC/C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC1C,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,UAAU;IACV,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,mDAAmD;IACnD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IAEzG,MAAM,OAAO,GAAG,YAAY,CAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,EACnF,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAC/B,wBAAwB,MAAM,CAAC,UAAU,kBAAkB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxF,CAAA;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO;QACL,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE;KACpH,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,cAAsB,EACtB,WAAmB,EACnB,YAAsB,EACtB,MAAuE;IAEvE,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC/F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,sBAAsB;SAClC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,YAAY,UAAU,KAAK,cAAc,gBAAgB,WAAW,YAAY,YAAY,CAAC,MAAM,eAAe;SAC5H;QACD,eAAe,EAAE,YAAY;KAC9B,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,0BAA0B,CACxC,UAAsB,EACtB,QAAwB;IAExB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9C,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;QAClC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,SAAS;KAC1B,CAAA;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,mBAA2B,EAC3B,WAAmB;IAEnB,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,GAAG,WAAW,CAAA;IACzD,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC,CAAA;IAC5C,6EAA6E;IAC7E,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAA;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC9B,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAe,EACf,MAAc,EACd,MAAwD;IAExD,MAAM,IAAI,GAAqC;QAC7C,SAAS,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC1F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,gBAAgB;QAC9B,MAAM,EAAE;YACN,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,oBAAoB;SAChC;QACD,MAAM,EAAE;YACN,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wBAAwB,WAAW,WAAW,OAAO,YAAY,MAAM,EAAE;SACnF;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/D,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAmB,CAAA;AACrD,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"ibac.d.ts","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,KAAK,CAAC;QAClB,KAAK,EAAE,SAAS,CAAA;QAChB,UAAU,EAAE,OAAO,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,OAAO,EAAE,aAAa,CAAA;CACvB;AAcD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAM9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EAAE,EACnB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,UAAU,CAeZ;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,EAAE,EACnB,UAAU,EAAE,UAAU,GACrB;IAAE,YAAY,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAoBnG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE;IACN,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;CACvC,GACA,oBAAoB,CA2CtB"}
1
+ {"version":3,"file":"ibac.d.ts","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;IACtB,YAAY,EAAE,KAAK,CAAC;QAClB,KAAK,EAAE,SAAS,CAAA;QAChB,UAAU,EAAE,OAAO,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,OAAO,EAAE,aAAa,CAAA;CACvB;AAcD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAM9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EAAE,EACnB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,UAAU,CAeZ;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,EAAE,EACnB,UAAU,EAAE,UAAU,GACrB;IAAE,YAAY,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,SAAS,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CA0BnG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE;IACN,QAAQ,EAAE,cAAc,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAA;CACvC,GACA,oBAAoB,CA0DtB"}
@@ -11,6 +11,7 @@
11
11
  import { createDelegation, scopeAuthorizes } from '../core/delegation.js';
12
12
  import { sign } from '../crypto/keys.js';
13
13
  import { canonicalizeForWrite } from '../core/canonical.js';
14
+ import { parseRfc3339 } from '../core/rfc3339.js';
14
15
  // ── Verb → scope prefix mapping ──
15
16
  const VERB_PREFIX = {
16
17
  read: 'data:read',
@@ -60,8 +61,14 @@ export function evaluateIBACTuples(tuples, delegation) {
60
61
  const verb = tuple.action.replace(/^tool:/, '');
61
62
  const prefix = VERB_PREFIX[verb] || `data:${verb}`;
62
63
  const scope = `${prefix}:${tuple.resource}`;
63
- // Check expiry
64
- if (new Date(delegation.expiresAt) <= new Date()) {
64
+ // Check expiry. An expiry this adapter cannot read is not an expiry it can
65
+ // honour, so it denies on the same branch a real expiry denies on; the reason
66
+ // says which of the two it was.
67
+ const expiry = parseRfc3339(delegation.expiresAt);
68
+ if (!expiry.ok) {
69
+ return { tuple, authorized: false, scope, reason: `Delegation expiresAt is not a readable timestamp (${expiry.reason})` };
70
+ }
71
+ if (expiry.ms <= Date.now()) {
65
72
  return { tuple, authorized: false, scope, reason: 'Delegation expired' };
66
73
  }
67
74
  const authorized = scopeAuthorizes(delegation.scope, scope);
@@ -84,10 +91,20 @@ export function governIBACIntent(intent, config) {
84
91
  resource: action.resource,
85
92
  constraints: action.constraints,
86
93
  }));
94
+ // The delegation has to be usable before any of this is worth evaluating,
95
+ // and the check cannot live inside the per-tuple map: `[].every(...)` is
96
+ // vacuously true, so an intent carrying no actions never reached the expiry
97
+ // test and was signed as a success against a delegation that had expired.
98
+ // Hoisting it changes no answer the per-tuple path ever computed, because
99
+ // that path denies on exactly these two conditions; it supplies one where
100
+ // none was computed at all.
101
+ const delegationExpiry = parseRfc3339(config.delegation.expiresAt);
102
+ const delegationUsable = delegationExpiry.ok && delegationExpiry.ms > Date.now();
87
103
  // Evaluate
88
104
  const { tupleResults } = evaluateIBACTuples(tuples, config.delegation);
89
- const allAuthorized = tupleResults.every(r => r.authorized);
105
+ const allAuthorized = delegationUsable && tupleResults.every(r => r.authorized);
90
106
  const scopesUsed = tupleResults.map(r => r.scope).join(', ');
107
+ const deniedCount = tupleResults.filter(r => !r.authorized).length;
91
108
  // Build signed receipt
92
109
  const receiptData = {
93
110
  receiptId: `rcpt_ibac_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 6)}`,
@@ -104,7 +121,11 @@ export function governIBACIntent(intent, config) {
104
121
  status: allAuthorized ? 'success' : 'failure',
105
122
  summary: allAuthorized
106
123
  ? `All ${tupleResults.length} IBAC tuples authorized`
107
- : `${tupleResults.filter(r => !r.authorized).length} of ${tupleResults.length} tuples denied`,
124
+ : !delegationUsable
125
+ ? delegationExpiry.ok
126
+ ? 'Delegation expired'
127
+ : `Delegation expiresAt is not a readable timestamp (${delegationExpiry.reason})`
128
+ : `${deniedCount} of ${tupleResults.length} tuples denied`,
108
129
  },
109
130
  delegationChain: [],
110
131
  };
@@ -1 +1 @@
1
- {"version":3,"file":"ibac.js","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAsC3D,oCAAoC;AAEpC,MAAM,WAAW,GAA2B;IAC1C,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,cAAc;CACvB,CAAA;AAED,uBAAuB;AAEvB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAA;QAChE,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAmB,EACnB,YAAoB,EACpB,QAAgB,EAChB,UAAkB,EAClB,IAAuD;IAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,YAAY;QACzB,KAAK;QACL,UAAU;QACV,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmB,EACnB,UAAsB;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAE3C,eAAe;QACf,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;QAC1E,CAAC;QAED,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,UAAU;YACvB,CAAC,CAAC,UAAU,KAAK,4BAA4B;YAC7C,CAAC,CAAC,UAAU,KAAK,gCAAgC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAEjF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,YAAY,EAAE,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,MAKC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAgB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,SAAS,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;QACvC,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC,CAAA;IAEH,WAAW;IACX,MAAM,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAEtE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE5D,uBAAuB;IACvB,MAAM,WAAW,GAAqC;QACpD,SAAS,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC3F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,UAAU;SACtB;QACD,MAAM,EAAE;YACN,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC7C,OAAO,EAAE,aAAa;gBACpB,CAAC,CAAC,OAAO,YAAY,CAAC,MAAM,yBAAyB;gBACrD,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,MAAM,gBAAgB;SAChG;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAmB,CAAA;IAE9D,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AACzE,CAAC"}
1
+ {"version":3,"file":"ibac.js","sourceRoot":"","sources":["../../../src/adapters/ibac.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAsCjD,oCAAoC;AAEpC,MAAM,WAAW,GAA2B;IAC1C,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,cAAc;CACvB,CAAA;AAED,uBAAuB;AAEvB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAA;QAChE,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAmB,EACnB,YAAoB,EACpB,QAAgB,EAChB,UAAkB,EAClB,IAAuD;IAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,gBAAgB,CAAC;QACtB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,YAAY;QACzB,KAAK;QACL,UAAU;QACV,UAAU,EAAE,IAAI,EAAE,UAAU;QAC5B,cAAc,EAAE,IAAI,EAAE,cAAc;KACrC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmB,EACnB,UAAsB;IAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE,CAAA;QAClD,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;QAE3C,2EAA2E;QAC3E,8EAA8E;QAC9E,gCAAgC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,MAAM,CAAC,MAAM,GAAG,EAAE,CAAA;QAC3H,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;QAC1E,CAAC;QAED,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,UAAU;YACvB,CAAC,CAAC,UAAU,KAAK,4BAA4B;YAC7C,CAAC,CAAC,UAAU,KAAK,gCAAgC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAA;QAEjF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,YAAY,EAAE,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,MAKC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAgB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,SAAS,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;QACvC,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,EAAE;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC,CAAA;IAEH,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAClE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,EAAE,IAAI,gBAAgB,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEhF,WAAW;IACX,MAAM,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAEtE,MAAM,aAAa,GAAG,gBAAgB,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC/E,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5D,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAA;IAElE,uBAAuB;IACvB,MAAM,WAAW,GAAqC;QACpD,SAAS,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC3F,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,UAAU;SACtB;QACD,MAAM,EAAE;YACN,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC7C,OAAO,EAAE,aAAa;gBACpB,CAAC,CAAC,OAAO,YAAY,CAAC,MAAM,yBAAyB;gBACrD,CAAC,CAAC,CAAC,gBAAgB;oBACjB,CAAC,CAAC,gBAAgB,CAAC,EAAE;wBACnB,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,qDAAqD,gBAAgB,CAAC,MAAM,GAAG;oBACnF,CAAC,CAAC,GAAG,WAAW,OAAO,YAAY,CAAC,MAAM,gBAAgB;SAC/D;QACD,eAAe,EAAE,EAAE;KACpB,CAAA;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAmB,CAAA;IAE9D,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAE/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AACzE,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAIzD,OAAO,KAAK,EACV,WAAW,EAA4B,kBAAkB,EAAE,iBAAiB,EAC5E,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAI1B;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,GAAG,kBAAkB,CAE1G;AAoGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,UAAU,EAAE,EACnB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,gBAAqB,GAC7B,eAAe,CA0EjB"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAIzD,OAAO,KAAK,EACV,WAAW,EAA4B,kBAAkB,EAAE,iBAAiB,EAC5E,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAEnB,cAAc,YAAY,CAAA;AAI1B;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,GAAG,kBAAkB,CAE1G;AAyGD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,UAAU,EAAE,EACnB,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,gBAAqB,GAC7B,eAAe,CA0EjB"}
@@ -24,6 +24,7 @@
24
24
  // relying party. Soundness here is by accountability (a keyed caller on the
25
25
  // hook), not by construction.
26
26
  import { canonicalHashJCSForWrite } from '../../core/canonical-jcs.js';
27
+ import { formatRfc3339 } from '../../core/rfc3339.js';
27
28
  import { computeDelegationChainRootForWrite } from '../../decisionReceipt.js';
28
29
  import { createDelegationRef } from '../../core/reanchor.js';
29
30
  import { sign, publicKeyFromPrivate } from '../../crypto/keys.js';
@@ -38,7 +39,12 @@ export function verifiedIdJagGrant(grant, verification) {
38
39
  return { grant, verification };
39
40
  }
40
41
  function numericDateToIso(seconds) {
41
- return new Date(seconds * 1000).toISOString();
42
+ // Emission, not interpretation: a NumericDate from the caller-verified grant
43
+ // is rendered into the descriptor. formatRfc3339 is byte-identical to
44
+ // toISOString() across the representable range and takes a number, so no
45
+ // string can be reparsed here, and like toISOString() it raises RangeError on
46
+ // an instant outside that range.
47
+ return formatRfc3339(seconds * 1000);
42
48
  }
43
49
  /** Project the scope claim to APS scope tokens. Baseline only; RAR never widens it. */
44
50
  function mapScopeBaseline(claims) {
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,YAAY;AACZ,8EAA8E;AAC9E,uEAAuE;AACvE,wEAAwE;AACxE,+EAA+E;AAC/E,iEAAiE;AACjE,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,gCAAgC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAA;AAOnB,cAAc,YAAY,CAAA;AAE1B,MAAM,eAAe,GAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAEtG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,YAA+B;IACpF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAmC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;AAC/C,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,OAAmC,EACnC,aAAuB;IAEvB,MAAM,WAAW,GAAsB,EAAE,CAAA;IACzC,IAAI,UAA8B,CAAA;IAClC,IAAI,cAAsD,CAAA;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,IAAI,6DAA6D,EAAE,CAAC,CAAA;YACpJ,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,UAAU,GAAG,MAAM,CAAA;oBACnB,cAAc,GAAG,UAAU,CAAA;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,aAAa,IAAI,oBAAoB,MAAM,4DAA4D,EAAE,CAAC,CAAA;YAC5K,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,aAAa,IAAI,8EAA8E,EAAE,CAAC,CAAA;QACrK,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAyG,EAAE,WAAW,EAAE,CAAA;IACpI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAA;QAC9B,MAAM,CAAC,cAAc,GAAG,cAAc,CAAA;IACxC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB,EAAE,QAAiB;IAChE,MAAM,GAAG,GAAuB,EAAE,CAAA;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2JAA2J;AAC3J,SAAS,YAAY,CAAC,GAAwC,EAAE,KAAmB;IACjF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACxD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACrF,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC7G,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC3F,OAAO,EAAE,MAAM,EAAE,2CAA2C,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AAClF,CAAC;AAED,uKAAuK;AACvK,SAAS,sBAAsB,CAAC,MAAmB;IACjD,MAAM,GAAG,GAA2B;QAClC,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,WAAW;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IACjE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,KAAmB,EACnB,gBAAwB,EACxB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;IAE1C,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,2CAA2C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,8EAA8E,CAAC,CAAA;IACpI,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAA8C,CAAC,CAAA;IAE/F,MAAM,OAAO,GAAG,kBAAkB,cAAc,OAAO,UAAU,EAAE,CAAA;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IAE9D,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,uBAAuB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAA;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAE3C,MAAM,UAAU,GAAoB;QAClC,KAAK,EAAE,WAAW;QAClB,cAAc;QACd,sBAAsB,EAAE,QAAQ;QAChC,mBAAmB,EAAE,kCAAkC,CAAC,KAAK,CAAC;QAC9D,KAAK;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACjD,YAAY,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;QAC/F,WAAW,EAAE,MAAM,CAAC,SAAS;QAC7B,KAAK;QACL,uBAAuB;QACvB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC;QACvC,eAAe,EAAE;YACf,WAAW,EAAE,yBAAyB;YACtC,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC1D;QACD,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACvD,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;QAClD,kBAAkB,EAAE;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,iCAAiC;gBACtC,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,eAAe;gBAC3B,kBAAkB,EAAE,UAAU;gBAC9B,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,SAAS;aACvB;YACD,OAAO;YACP,SAAS;YACT,eAAe;YACf,UAAU;YACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,aAAa,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;QAC7E,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE;KACxD,CAAA;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAA;QACtC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAA;IAChD,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/oauth-id-jag/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,EAAE;AACF,YAAY;AACZ,8EAA8E;AAC9E,uEAAuE;AACvE,wEAAwE;AACxE,+EAA+E;AAC/E,iEAAiE;AACjE,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,gCAAgC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAA;AAOnB,cAAc,YAAY,CAAA;AAE1B,MAAM,eAAe,GAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAEtG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB,EAAE,YAA+B;IACpF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAmC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,6EAA6E;IAC7E,sEAAsE;IACtE,yEAAyE;IACzE,8EAA8E;IAC9E,iCAAiC;IACjC,OAAO,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;AACtC,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,OAAmC,EACnC,aAAuB;IAEvB,MAAM,WAAW,GAAsB,EAAE,CAAA;IACzC,IAAI,UAA8B,CAAA;IAClC,IAAI,cAAsD,CAAA;IAC1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,MAAM,EAAE,aAAa,IAAI,6DAA6D,EAAE,CAAC,CAAA;YACpJ,SAAQ;QACV,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,UAAU,GAAG,MAAM,CAAA;oBACnB,cAAc,GAAG,UAAU,CAAA;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,aAAa,IAAI,oBAAoB,MAAM,4DAA4D,EAAE,CAAC,CAAA;YAC5K,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,MAAM,EAAE,aAAa,IAAI,8EAA8E,EAAE,CAAC,CAAA;QACrK,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAyG,EAAE,WAAW,EAAE,CAAA;IACpI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAA;QAC9B,MAAM,CAAC,cAAc,GAAG,cAAc,CAAA;IACxC,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB,EAAE,QAAiB;IAChE,MAAM,GAAG,GAAuB,EAAE,CAAA;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC3D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;IAClD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAC7D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2JAA2J;AAC3J,SAAS,YAAY,CAAC,GAAwC,EAAE,KAAmB;IACjF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAA;IACxD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IACrF,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC7G,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAC3F,OAAO,EAAE,MAAM,EAAE,2CAA2C,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;AAClF,CAAC;AAED,uKAAuK;AACvK,SAAS,sBAAsB,CAAC,MAAmB;IACjD,MAAM,GAAG,GAA2B;QAClC,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,WAAW;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IACjE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4B,EAC5B,KAAmB,EACnB,gBAAwB,EACxB,OAAO,GAAqB,EAAE;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAA;IAE1C,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,iBAAiB,CAAC,wBAAwB,EAAE,2CAA2C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAA;IAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,EAAE,8EAA8E,CAAC,CAAA;IACpI,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,wBAAwB,CAAC,QAA8C,CAAC,CAAA;IAE/F,MAAM,OAAO,GAAG,kBAAkB,cAAc,OAAO,UAAU,EAAE,CAAA;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,eAAe,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IAE9D,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,uBAAuB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAA;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAE3C,MAAM,UAAU,GAAoB;QAClC,KAAK,EAAE,WAAW;QAClB,cAAc;QACd,sBAAsB,EAAE,QAAQ;QAChC,mBAAmB,EAAE,kCAAkC,CAAC,KAAK,CAAC;QAC9D,KAAK;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACjD,YAAY,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;QAC/F,WAAW,EAAE,MAAM,CAAC,SAAS;QAC7B,KAAK;QACL,uBAAuB;QACvB,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC;QACvC,eAAe,EAAE;YACf,WAAW,EAAE,yBAAyB;YACtC,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC1D;QACD,aAAa,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;QACvD,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;QAClD,kBAAkB,EAAE;YAClB,MAAM,EAAE;gBACN,GAAG,EAAE,iCAAiC;gBACtC,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,eAAe;gBAC3B,kBAAkB,EAAE,UAAU;gBAC9B,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,eAAe;gBACzB,UAAU,EAAE,UAAU;gBACtB,WAAW,EAAE,SAAS;aACvB;YACD,OAAO;YACP,SAAS;YACT,eAAe;YACf,UAAU;YACV,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,aAAa,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;QAC7E,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE;KACxD,CAAA;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAA;QACtC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAA;IAChD,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}
@@ -886,9 +886,11 @@ function cmdStatus() {
886
886
  console.log('');
887
887
  console.log(` Agent: ${agent.agentId}`);
888
888
  console.log(` Key: ${agent.publicKey.slice(0, 16)}...`);
889
- // Verify identity
890
- const idCheck = verifyPassport(agent.passport);
891
- console.log(` Identity: ${idCheck.valid ? '✓ valid' : '✗ INVALID'}`);
889
+ // Verify identity. This is a local status line, not a gate: it reports
890
+ // whether the passport's own signature holds, which is integrity, so it
891
+ // names the opt-in and labels the answer for what it is.
892
+ const idCheck = verifyPassport(agent.passport, { allowSelfSigned: true });
893
+ console.log(` Identity: ${idCheck.valid ? '✓ signature valid (self-signed, no trust anchor)' : '✗ INVALID'}`);
892
894
  // Check attestation
893
895
  if (agent.attestation) {
894
896
  const attCheck = verifyAttestation(agent.attestation);