agent-passport-system 7.0.0 → 7.2.0

package/dist/src/v2/bounds/evaluate.js

@@ -0,0 +1,315 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+//
+// PROPOSED, OPT-IN. Assessing fulfilment records and evaluating a bound's state.
+//
+// Pure. No clock, no I/O, no network. Every instant compared here is supplied by the
+// caller, and every resolver is the caller's. Not required by draft-pidlisnyi-aps-03; see
+// ./types.ts for the specification position.
+import { lifecycleState, notEstablished } from '../lifecycle-state/state.js';
+import { verifyAuthorityBoundFulfilmentSignature } from './canonical.js';
+import { AUTHORITY_BOUND_FULFILMENT_TYPE, AUTHORITY_BOUND_TYPE, ATTESTOR_ROLE_ANSWERS, BOUND_KINDS, } from './types.js';
+/** Thrown when an input this module cannot read at all is passed. A malformed BOUND is a
+ *  programming error, not a verdict: the module was asked a question about nothing. A
+ *  malformed FULFILMENT RECORD is different and never throws, because a record somebody
+ *  else wrote is data, and the right answer about it is a rejection with a reason code. */
+export class AuthorityBoundError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'AuthorityBoundError';
+        this.code = code;
+    }
+}
+const CANONICAL_UNSIGNED_INTEGER = /^(0|[1-9][0-9]*)$/;
+const DELEGATION_ID = /^sha256:[0-9a-f]{64}$/;
+const SIGNATURE_HEX = /^[0-9a-f]{128}$/;
+export function isBoundKind(value) {
+    return typeof value === 'string' && BOUND_KINDS.includes(value);
+}
+export function isAttestorRoleAnswer(value) {
+    return (typeof value === 'string' && ATTESTOR_ROLE_ANSWERS.includes(value));
+}
+/** Shape check for a bound declaration. Throws, for the reason `AuthorityBoundError`
+ *  documents. */
+export function assertAuthorityBound(bound) {
+    if (bound === null || typeof bound !== 'object') {
+        throw new AuthorityBoundError('BOUND_MALFORMED', 'bound is not an object');
+    }
+    if (bound.record_type !== AUTHORITY_BOUND_TYPE) {
+        throw new AuthorityBoundError('BOUND_RECORD_TYPE_UNSUPPORTED', `record_type must be ${AUTHORITY_BOUND_TYPE}`);
+    }
+    if (typeof bound.bound_id !== 'string' || bound.bound_id.length === 0) {
+        throw new AuthorityBoundError('BOUND_MALFORMED', 'bound_id must be a non-empty string');
+    }
+    if (typeof bound.delegation_id !== 'string' || !DELEGATION_ID.test(bound.delegation_id)) {
+        throw new AuthorityBoundError('BOUND_MALFORMED', 'delegation_id must be sha256:<64 lowercase hex>');
+    }
+    if (!isBoundKind(bound.kind)) {
+        throw new AuthorityBoundError('BOUND_KIND_UNSUPPORTED', `kind must be one of ${BOUND_KINDS.join(', ')}`);
+    }
+    if (typeof bound.value !== 'string' || bound.value.length === 0) {
+        throw new AuthorityBoundError('BOUND_MALFORMED', 'value must be a non-empty string');
+    }
+    if (bound.kind !== 'purpose' && !CANONICAL_UNSIGNED_INTEGER.test(bound.value)) {
+        throw new AuthorityBoundError('BOUND_VALUE_NONCANONICAL', `a ${bound.kind} bound's value must be a canonical unsigned decimal integer`);
+    }
+    if (!Array.isArray(bound.fulfilment_attestor_roles)) {
+        throw new AuthorityBoundError('BOUND_MALFORMED', 'fulfilment_attestor_roles must be an array, empty if nobody but the issuer may attest');
+    }
+    for (const role of bound.fulfilment_attestor_roles) {
+        if (typeof role !== 'string' || role.length === 0) {
+            throw new AuthorityBoundError('BOUND_MALFORMED', 'fulfilment_attestor_roles must contain only non-empty strings');
+        }
+    }
+}
+/** True only for a record this module can read far enough to assess. A record that fails
+ *  here is rejected with `FULFILMENT_SCHEMA_INVALID`, never thrown on. */
+function readableFulfilment(record) {
+    return (record !== null &&
+        typeof record === 'object' &&
+        record.record_type === AUTHORITY_BOUND_FULFILMENT_TYPE &&
+        typeof record.bound_id === 'string' &&
+        record.bound_id.length > 0 &&
+        typeof record.delegation_id === 'string' &&
+        DELEGATION_ID.test(record.delegation_id) &&
+        typeof record.attestor === 'string' &&
+        record.attestor.length > 0 &&
+        typeof record.verification_method === 'string' &&
+        record.verification_method.length > 0 &&
+        typeof record.attested_at === 'string' &&
+        record.attested_at.length > 0 &&
+        (record.outcome === 'fulfilled' || record.outcome === 'not_fulfilled') &&
+        typeof record.reason_code === 'string' &&
+        record.reason_code.length > 0 &&
+        typeof record.signature === 'string' &&
+        SIGNATURE_HEX.test(record.signature));
+}
+function assessment(attestor, attestedAt, accepted, reasonCode, extra = {}) {
+    const out = { attestor, attested_at: attestedAt, accepted, reason_code: reasonCode };
+    if (extra.role_answer !== undefined)
+        out.role_answer = extra.role_answer;
+    if (extra.missing !== undefined)
+        out.missing = Object.freeze([...extra.missing]);
+    return Object.freeze(out);
+}
+/**
+ * Assess ONE fulfilment record against one bound.
+ *
+ * The order of the checks is the substance of this function, not an implementation detail.
+ * Standing is asked FIRST and authenticity SECOND, and each produces its own code, because
+ * "authenticated by somebody who may not say this" and "not authenticated at all" are
+ * different failures and collapsing them loses the distinction CAND-01 turns on. A valid
+ * signature establishes who signed. It does not establish that the signer was allowed to
+ * make this statement.
+ *
+ * `FULFILMENT_OUTCOME_NOT_FULFILLED` carries no `missing` limbs, and that is deliberate: a
+ * record from a party with standing saying the purpose was NOT met is a conclusion the
+ * verifier reached, not a gap in its evidence. Every other rejection names a limb.
+ *
+ * Concept source: aeoess/agent-authority-lifecycle, invariant candidate CAND-01 and
+ * invariant candidate BROAD-L7. Proposed.
+ */
+export function assessFulfilment(input) {
+    assertAuthorityBound(input.bound);
+    const { bound, record, atInstant } = input;
+    if (bound.kind !== 'purpose') {
+        return assessment('', '', false, 'FULFILMENT_NOT_APPLICABLE_TO_KIND', {
+            missing: ['coverage'],
+        });
+    }
+    if (!readableFulfilment(record)) {
+        return assessment('', '', false, 'FULFILMENT_SCHEMA_INVALID', { missing: ['source'] });
+    }
+    const attestor = record.attestor;
+    const attestedAt = record.attested_at;
+    // The record has to be about THIS bound on THIS delegation. A coverage gap: the claim does
+    // not state that it covers what the verdict needed.
+    if (record.bound_id !== bound.bound_id || record.delegation_id !== bound.delegation_id) {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_NOT_BOUND_TO_BOUND', {
+            missing: ['coverage'],
+        });
+    }
+    if (attestedAt > atInstant) {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_NOT_YET_ATTESTED', {
+            missing: ['coverage'],
+        });
+    }
+    const roleAnswer = input.resolveAttestorRole(attestor, bound.fulfilment_attestor_roles, atInstant);
+    if (!isAttestorRoleAnswer(roleAnswer)) {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_ATTESTOR_ROLE_UNKNOWN', {
+            missing: ['source'],
+        });
+    }
+    if (roleAnswer === 'unknown') {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_ATTESTOR_ROLE_UNKNOWN', {
+            role_answer: roleAnswer,
+            missing: ['source'],
+        });
+    }
+    if (roleAnswer === 'does_not_hold_role') {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_ATTESTOR_WITHOUT_STANDING', {
+            role_answer: roleAnswer,
+            missing: ['source'],
+        });
+    }
+    const publicKey = input.resolveVerificationKey(attestor, record.verification_method, attestedAt);
+    if (typeof publicKey !== 'string' || publicKey.length === 0) {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_KEY_UNRESOLVED', {
+            role_answer: roleAnswer,
+            missing: ['source'],
+        });
+    }
+    if (!verifyAuthorityBoundFulfilmentSignature(record, publicKey)) {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_SIGNATURE_INVALID', {
+            role_answer: roleAnswer,
+            missing: ['source'],
+        });
+    }
+    if (record.outcome !== 'fulfilled') {
+        return assessment(attestor, attestedAt, false, 'FULFILMENT_OUTCOME_NOT_FULFILLED', {
+            role_answer: roleAnswer,
+        });
+    }
+    return assessment(attestor, attestedAt, true, 'FULFILMENT_ACCEPTED', {
+        role_answer: roleAnswer,
+    });
+}
+function decimal(value, fallback) {
+    const raw = value ?? fallback;
+    if (!CANONICAL_UNSIGNED_INTEGER.test(raw)) {
+        throw new AuthorityBoundError('COUNTER_NONCANONICAL', `expected a canonical unsigned decimal integer, got ${JSON.stringify(raw)}`);
+    }
+    return BigInt(raw);
+}
+function lifecycleFor(state, reasonCode, missing) {
+    if (state === 'not_established')
+        return notEstablished(missing, reasonCode);
+    return lifecycleState({
+        verdict: state === 'exhausted' ? 'invalid' : 'valid',
+        reason_code: reasonCode,
+    });
+}
+/**
+ * Evaluate one bound's state at one instant.
+ *
+ * THE RESOLUTION RULE, and why it is this way round. For a purpose bound:
+ *
+ *   1. If any fulfilment record was ACCEPTED, the state is `exhausted`.
+ *   2. Otherwise, if any record was rejected on an EVIDENTIAL ground (signature, standing,
+ *      unresolved role, unresolved key, unreadable shape), the state is `not_established`.
+ *   3. Otherwise the state is `not_reached`.
+ *
+ * Step 1 comes before step 2 on purpose, and it is invariant CAND-02's rule made
+ * executable: an exhaustion that WAS established is never downgraded by a later claim
+ * nobody could authenticate. A later finding is a new record about an earlier one, never a
+ * rewrite of it. Because the rule is a fold over the whole set rather than a running
+ * mutation, the verdict is the same whatever order the records arrive in, which is what
+ * makes it safe for a caller to keep them in an unordered store.
+ *
+ * Step 3 reads `not_reached` from an empty record set, and that is the one reading here
+ * worth arguing with. It is a positive claim: the bound is declared, no evidence reaches
+ * it, and under the applicable authority model a purpose that nobody has recorded as met is
+ * a purpose that is not met. A model whose default runs the other way (absence of a
+ * periodic fulfilment report is itself the trigger) is a model this function cannot
+ * express, and a caller in that position should report `not_established` with a `source`
+ * limb rather than passing an empty set and reading the answer as a finding. CAND-01's
+ * carve-out for a declared default on absence is the reason the disclaimer is here and not
+ * a silent assumption.
+ *
+ * A `use_count` bound needs no records at all: the ADMISSION reaches it, so `consumed`
+ * against `value` is the whole computation. A `budget` bound is answered by the ledger's
+ * counter, per draft-03 section 3.4, verbatim: "Signatures establish static limits; they do
+ * not establish the current cumulative total."
+ *
+ * Reported ALONGSIDE a chain result, never merged into it, and never in place of it. A
+ * grant can be exhausted while its chain still verifies `valid`, which is the whole point:
+ * exhaustion is invisible to chain verification. A grant can also be expired AND exhausted,
+ * and then the chain result says `EXPIRED` and this says `exhaustion` and neither
+ * overwrites the other. Invariant L10.
+ *
+ * Concept source: aeoess/agent-authority-lifecycle, invariant L10 and invariant candidates
+ * CAND-01 and CAND-02. All proposed.
+ */
+export function evaluateBound(input) {
+    assertAuthorityBound(input.bound);
+    const { bound } = input;
+    if (typeof input.atInstant !== 'string' || input.atInstant.length === 0) {
+        throw new AuthorityBoundError('INSTANT_MISSING', 'atInstant must be a non-empty string');
+    }
+    const assessments = [];
+    let state;
+    let reasonCode;
+    let remaining;
+    const missing = [];
+    if (bound.kind === 'purpose') {
+        const records = input.fulfilments ?? [];
+        if (records.length > 0) {
+            if (typeof input.resolveAttestorRole !== 'function') {
+                throw new AuthorityBoundError('ROLE_RESOLVER_MISSING', 'a purpose bound with fulfilment records needs resolveAttestorRole');
+            }
+            if (typeof input.resolveVerificationKey !== 'function') {
+                throw new AuthorityBoundError('KEY_RESOLVER_MISSING', 'a purpose bound with fulfilment records needs resolveVerificationKey');
+            }
+        }
+        const resolveAttestorRole = input.resolveAttestorRole ?? (() => 'unknown');
+        const resolveVerificationKey = input.resolveVerificationKey ?? (() => null);
+        for (const record of records) {
+            assessments.push(assessFulfilment({
+                bound,
+                record,
+                atInstant: input.atInstant,
+                resolveAttestorRole,
+                resolveVerificationKey,
+            }));
+        }
+        const accepted = assessments.some(a => a.accepted);
+        const unestablished = assessments.filter(a => !a.accepted && a.missing !== undefined);
+        if (accepted) {
+            state = 'exhausted';
+            reasonCode = 'PURPOSE_EXHAUSTED';
+        }
+        else if (unestablished.length > 0) {
+            state = 'not_established';
+            reasonCode = 'BOUND_STATE_NOT_ESTABLISHED';
+            for (const a of unestablished) {
+                for (const gap of a.missing ?? [])
+                    if (!missing.includes(gap))
+                        missing.push(gap);
+            }
+        }
+        else {
+            state = 'not_reached';
+            reasonCode = 'BOUND_NOT_REACHED';
+        }
+    }
+    else if (bound.kind === 'use_count') {
+        const limit = decimal(bound.value, '0');
+        const consumed = decimal(input.consumed, '0');
+        const left = consumed >= limit ? 0n : limit - consumed;
+        remaining = left.toString(10);
+        state = consumed >= limit ? 'exhausted' : 'not_reached';
+        reasonCode = state === 'exhausted' ? 'USE_COUNT_EXHAUSTED' : 'BOUND_NOT_REACHED';
+    }
+    else {
+        const ceiling = decimal(bound.value, '0');
+        const committed = decimal(input.budgetCounter?.committed, '0');
+        const reserved = decimal(input.budgetCounter?.reserved, '0');
+        state = committed + reserved >= ceiling ? 'exhausted' : 'not_reached';
+        reasonCode = state === 'exhausted' ? 'BUDGET_EXHAUSTED' : 'BOUND_NOT_REACHED';
+    }
+    const ending = state === 'exhausted' ? 'exhaustion' : null;
+    const result = {
+        bound_id: bound.bound_id,
+        kind: bound.kind,
+        bound_state: state,
+        reason_code: reasonCode,
+        ending,
+        lifecycle: lifecycleFor(state, reasonCode, missing.length > 0 ? missing : ['source']),
+        fulfilments: Object.freeze([...assessments]),
+    };
+    if (remaining !== undefined)
+        result.remaining = remaining;
+    return Object.freeze(result);
+}
+//# sourceMappingURL=evaluate.js.map

package/dist/src/v2/bounds/evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.js","sourceRoot":"","sources":["../../../../src/v2/bounds/evaluate.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,qFAAqF;AACrF,0FAA0F;AAC1F,6CAA6C;AAE7C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAE5E,OAAO,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,GAYZ,MAAM,YAAY,CAAA;AAEnB;;;2FAG2F;AAC3F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAQ;IAErB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAED,MAAM,0BAA0B,GAAG,mBAAmB,CAAA;AACtD,MAAM,aAAa,GAAG,uBAAuB,CAAA;AAC7C,MAAM,aAAa,GAAG,iBAAiB,CAAA;AAEvC,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAK,qBAA2C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC1F,CAAA;AACH,CAAC;AAED;iBACiB;AACjB,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAC3B,+BAA+B,EAC/B,uBAAuB,oBAAoB,EAAE,CAC9C,CAAA;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,iDAAiD,CAClD,CAAA;IACH,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAC3B,wBAAwB,EACxB,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChD,CAAA;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,mBAAmB,CAC3B,0BAA0B,EAC1B,KAAK,KAAK,CAAC,IAAI,6DAA6D,CAC7E,CAAA;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,uFAAuF,CACxF,CAAA;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,+DAA+D,CAChE,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;0EAC0E;AAC1E,SAAS,kBAAkB,CAAC,MAAgC;IAC1D,OAAO,CACL,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,WAAW,KAAK,+BAA+B;QACtD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QACxC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC1B,OAAO,MAAM,CAAC,mBAAmB,KAAK,QAAQ;QAC9C,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;QACrC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC;QACtE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC7B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CACrC,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CACjB,QAAgB,EAChB,UAAkB,EAClB,QAAiB,EACjB,UAA+C,EAC/C,KAAK,GAAgF,EAAE;IAEvF,MAAM,GAAG,GAOL,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;IAC5E,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;IACxE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;IAE1C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE;YACpE,OAAO,EAAE,CAAC,UAAU,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAA;IAErC,2FAA2F;IAC3F,oDAAoD;IACpD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,+BAA+B,EAAE;YAC9E,OAAO,EAAE,CAAC,UAAU,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,6BAA6B,EAAE;YAC5E,OAAO,EAAE,CAAC,UAAU,CAAC;SACtB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAC1C,QAAQ,EACR,KAAK,CAAC,yBAAyB,EAC/B,SAAS,CACV,CAAA;IACD,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE;YACjF,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE;YACjF,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,sCAAsC,EAAE;YACrF,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,sBAAsB,CAC5C,QAAQ,EACR,MAAM,CAAC,mBAAmB,EAC1B,UAAU,CACX,CAAA;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,2BAA2B,EAAE;YAC1E,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,uCAAuC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE;YAC7E,WAAW,EAAE,UAAU;YACvB,OAAO,EAAE,CAAC,QAAQ,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE;YACjF,WAAW,EAAE,UAAU;SACxB,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE;QACnE,WAAW,EAAE,UAAU;KACxB,CAAC,CAAA;AACJ,CAAC;AAuBD,SAAS,OAAO,CAAC,KAAyB,EAAE,QAAgB;IAC1D,MAAM,GAAG,GAAG,KAAK,IAAI,QAAQ,CAAA;IAC7B,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,sDAAsD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAC5E,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAED,SAAS,YAAY,CACnB,KAAiB,EACjB,UAA2B,EAC3B,OAAoC;IAEpC,IAAI,KAAK,KAAK,iBAAiB;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC3E,OAAO,cAAc,CAAC;QACpB,OAAO,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACpD,WAAW,EAAE,UAAU;KACxB,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IACvB,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAA;IAC1F,CAAC;IAED,MAAM,WAAW,GAA2B,EAAE,CAAA;IAC9C,IAAI,KAAiB,CAAA;IACrB,IAAI,UAA2B,CAAA;IAC/B,IAAI,SAA6B,CAAA;IACjC,MAAM,OAAO,GAAuB,EAAE,CAAA;IAEtC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAA;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,OAAO,KAAK,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;gBACpD,MAAM,IAAI,mBAAmB,CAC3B,uBAAuB,EACvB,mEAAmE,CACpE,CAAA;YACH,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,sBAAsB,KAAK,UAAU,EAAE,CAAC;gBACvD,MAAM,IAAI,mBAAmB,CAC3B,sBAAsB,EACtB,sEAAsE,CACvE,CAAA;YACH,CAAC;QACH,CAAC;QACD,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC1E,MAAM,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,WAAW,CAAC,IAAI,CACd,gBAAgB,CAAC;gBACf,KAAK;gBACL,MAAM;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,mBAAmB;gBACnB,sBAAsB;aACvB,CAAC,CACH,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAA;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,GAAG,WAAW,CAAA;YACnB,UAAU,GAAG,mBAAmB,CAAA;QAClC,CAAC;aAAM,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,KAAK,GAAG,iBAAiB,CAAA;YACzB,UAAU,GAAG,6BAA6B,CAAA;YAC1C,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;gBAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;oBAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAClF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,aAAa,CAAA;YACrB,UAAU,GAAG,mBAAmB,CAAA;QAClC,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAA;QACtD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC7B,KAAK,GAAG,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAA;QACvD,UAAU,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,mBAAmB,CAAA;IAClF,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC5D,KAAK,GAAG,SAAS,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAA;QACrE,UAAU,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAA;IAC/E,CAAC;IAED,MAAM,MAAM,GAAgB,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAA;IACvE,MAAM,MAAM,GASR;QACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM;QACN,SAAS,EAAE,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;KAC7C,CAAA;IACD,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAA;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC"}

package/dist/src/v2/bounds/index.d.ts

@@ -0,0 +1,6 @@
+export * from './types.js';
+export * from './canonical.js';
+export * from './evaluate.js';
+export * from './record.js';
+export * from './purpose.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/v2/bounds/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/v2/bounds/index.ts"],"names":[],"mappings":"AAQA,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}

package/dist/src/v2/bounds/index.js

@@ -0,0 +1,13 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+//
+// PROPOSED, OPT-IN. Non-time bounds on a grant: purpose, use count and budget.
+// Nothing here is required by draft-pidlisnyi-aps-03 and nothing here changes any existing
+// exported behaviour. Concept source: aeoess/agent-authority-lifecycle, invariant L10 and
+// invariant candidates CAND-01 and CAND-02. See ./types.ts.
+export * from './types.js';
+export * from './canonical.js';
+export * from './evaluate.js';
+export * from './record.js';
+export * from './purpose.js';
+//# sourceMappingURL=index.js.map

package/dist/src/v2/bounds/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/v2/bounds/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,EAAE;AACF,+EAA+E;AAC/E,2FAA2F;AAC3F,0FAA0F;AAC1F,4DAA4D;AAE5D,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}

package/dist/src/v2/bounds/purpose.d.ts

@@ -0,0 +1,2 @@
+export { isPurposePermitted, purposeCategory } from '../../core/data-lifecycle.js';
+//# sourceMappingURL=purpose.d.ts.map

package/dist/src/v2/bounds/purpose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purpose.d.ts","sourceRoot":"","sources":["../../../../src/v2/bounds/purpose.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA"}

package/dist/src/v2/bounds/purpose.js

@@ -0,0 +1,23 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+//
+// PROPOSED module, but these two functions are NOT new and NOT proposed. They are the
+// hierarchical purpose helpers that have shipped in `src/core/data-lifecycle.ts` since
+// before this module existed, re-exported here so that both reference SDKs agree on where
+// purpose membership lives.
+//
+// WHY THE RE-EXPORT. The Python SDK had no port of either function. Adding them there under
+// a `data_lifecycle` module, to hold two functions, would have put the same primitive at two
+// unrelated paths in the two languages, which becomes a cross-language test annoyance the
+// first time a vector references it. Both SDKs now expose them from the bounds module, and
+// the TypeScript original stays exported from its old path too, so nothing that imports it
+// today changes.
+//
+// PURPOSE MEMBERSHIP IS NOT PURPOSE EXHAUSTION, and the distinction is the reason this file
+// carries a comment at all. `isPurposePermitted` answers whether a requested purpose falls
+// inside a set of allowed purposes. It answers `true` for the second compressor purchase
+// exactly as it does for the first. Membership can therefore never decide exhaustion, and a
+// boundary that checks only membership is the defective implementation the purpose-bound
+// case corpus exists to catch. `evaluateBound` is the exhaustion question.
+export { isPurposePermitted, purposeCategory } from '../../core/data-lifecycle.js';
+//# sourceMappingURL=purpose.js.map

package/dist/src/v2/bounds/purpose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purpose.js","sourceRoot":"","sources":["../../../../src/v2/bounds/purpose.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,EAAE;AACF,sFAAsF;AACtF,uFAAuF;AACvF,0FAA0F;AAC1F,4BAA4B;AAC5B,EAAE;AACF,4FAA4F;AAC5F,6FAA6F;AAC7F,0FAA0F;AAC1F,2FAA2F;AAC3F,2FAA2F;AAC3F,iBAAiB;AACjB,EAAE;AACF,4FAA4F;AAC5F,2FAA2F;AAC3F,yFAAyF;AACzF,4FAA4F;AAC5F,yFAAyF;AACzF,2EAA2E;AAE3E,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA"}

package/dist/src/v2/bounds/record.d.ts

@@ -0,0 +1,78 @@
+import { type AuthorityBoundFulfilment, type AuthorityExhaustion, type BoundEvaluation } from './types.js';
+export interface IssueFulfilmentInput {
+    readonly bound_id: string;
+    readonly delegation_id: string;
+    readonly attestor: string;
+    readonly verification_method: string;
+    /** Canonical UTC-millisecond time, supplied by the caller. Issuance never reads a clock,
+     *  so the same inputs produce the same bytes on every run, which is what makes the
+     *  signature reproducible in a test and in a conformance vector. */
+    readonly attested_at: string;
+    readonly outcome: 'fulfilled' | 'not_fulfilled';
+    readonly reason_code: string;
+    /** Omitted from the record entirely when not supplied, never written as null. */
+    readonly detail?: string;
+}
+/**
+ * Mint a signed fulfilment attestation.
+ *
+ * What this function does NOT establish: that the holder of `privateKey` is in fact
+ * `attestor`, that `verification_method` is one of that party's keys, or that the attestor
+ * holds any fulfilment-attestor role. All three are a resolver's answer, not a local one.
+ * `assessFulfilment` makes those checks, and it asks about standing BEFORE it asks about the
+ * signature, because a record can be perfectly authentic and still come from somebody with
+ * no standing to make the statement.
+ *
+ * Proposed. Concept source: aeoess/agent-authority-lifecycle.
+ */
+export declare function issueAuthorityBoundFulfilment(input: IssueFulfilmentInput, privateKeyHex: string): AuthorityBoundFulfilment;
+export interface IssueExhaustionInput {
+    readonly boundary: string;
+    readonly verification_method: string;
+    /** Canonical UTC-millisecond time the finding was made. Never read from a clock. */
+    readonly found_at: string;
+    readonly detail?: string;
+}
+/**
+ * Mint the OPTIONAL signed exhaustion record for a `BoundEvaluation` that reached
+ * `exhausted`.
+ *
+ * REFUSES on any other state, and the refusal is the design. A record that says "I found
+ * this bound exhausted" when the evaluation said `not_established` would be a boundary
+ * asserting a finding it did not make, which is precisely what CAND-01 forbids. There is no
+ * flag to override it.
+ *
+ * `evidence` is derived from the evaluation's own accepted fulfilment records, and it is
+ * EMPTY for a `use_count` or `budget` bound. That emptiness is honest rather than
+ * incomplete: the basis for those two is the boundary's own ledger, which is the one thing
+ * an outside verifier cannot check, and a placeholder there would hide the gap. The same
+ * limit applies to the whole record, and ./types.ts states it: the record attests the
+ * boundary's finding, not the state of the world, on the model draft-03 section 5.3.3 uses
+ * for an action result.
+ *
+ * Proposed. Concept source: aeoess/agent-authority-lifecycle, invariant L10.
+ */
+export declare function issueAuthorityExhaustion(evaluation: BoundEvaluation, delegationId: string, input: IssueExhaustionInput, privateKeyHex: string): AuthorityExhaustion;
+export type AuthorityExhaustionFailureCode = 'SCHEMA_INVALID' | 'UNSUPPORTED_RECORD_TYPE' | 'ID_MISMATCH' | 'KEY_UNRESOLVED' | 'SIGNATURE_INVALID';
+export interface AuthorityExhaustionVerification {
+    /** `valid` or `invalid` only. This function answers a question about ONE record's bytes
+     *  and its signer, which is genuinely two sided, so it does not borrow the lifecycle
+     *  vocabulary. What the record means for a grant's state is `evaluateBound`'s question,
+     *  and a verified record is evidence toward it, never a substitute for it. */
+    readonly status: 'valid' | 'invalid';
+    readonly failures: readonly AuthorityExhaustionFailureCode[];
+}
+/**
+ * Verify an exhaustion record's bytes, identifier and signature.
+ *
+ * A `valid` answer here means: the record recomputes its own identifier, and the key
+ * resolved for its `boundary` at its `found_at` signed it. It does NOT mean the bound is
+ * exhausted. It means the named boundary said so, at that time, over those bytes. Treating
+ * the two as the same thing is the substitution draft-03's own security considerations warn
+ * about for receipts generally, verbatim: "Verifiers MUST treat receipts as evidence of what
+ * was attested, not as proof of what is true."
+ *
+ * Proposed.
+ */
+export declare function verifyAuthorityExhaustion(record: AuthorityExhaustion, resolveVerificationKey: (boundary: string, verificationMethod: string, foundAt: string) => string | null): AuthorityExhaustionVerification;
+//# sourceMappingURL=record.d.ts.map

package/dist/src/v2/bounds/record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../../src/v2/bounds/record.ts"],"names":[],"mappings":"AAgBA,OAAO,EAIL,KAAK,wBAAwB,EAE7B,KAAK,mBAAmB,EAExB,KAAK,eAAe,EAErB,MAAM,YAAY,CAAA;AAEnB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC;;wEAEoE;IACpE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,eAAe,CAAA;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,oBAAoB,EAC3B,aAAa,EAAE,MAAM,GACpB,wBAAwB,CAsC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,eAAe,EAC3B,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,oBAAoB,EAC3B,aAAa,EAAE,MAAM,GACpB,mBAAmB,CAiDrB;AAED,MAAM,MAAM,8BAA8B,GACtC,gBAAgB,GAChB,yBAAyB,GACzB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,+BAA+B;IAC9C;;;kFAG8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,8BAA8B,EAAE,CAAA;CAC7D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,sBAAsB,EAAE,CACtB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,KACZ,MAAM,GAAG,IAAI,GACjB,+BAA+B,CAqDjC"}

package/dist/src/v2/bounds/record.js

@@ -0,0 +1,170 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+//
+// PROPOSED, OPT-IN. Issuing and verifying the two records this module declares.
+//
+// Neither record is required by draft-pidlisnyi-aps-03 and neither is an `aps:` record type.
+// See ./types.ts for what each one attests and, more importantly, what it does not.
+import { computeAuthorityExhaustionIdForWrite, computeAuthorityExhaustionId, signAuthorityBoundFulfilment, signAuthorityExhaustion, verifyAuthorityExhaustionSignature, } from './canonical.js';
+import { AuthorityBoundError } from './evaluate.js';
+import { AUTHORITY_BOUND_FULFILMENT_TYPE, AUTHORITY_EXHAUSTION_TYPE, BOUND_KINDS, } from './types.js';
+/**
+ * Mint a signed fulfilment attestation.
+ *
+ * What this function does NOT establish: that the holder of `privateKey` is in fact
+ * `attestor`, that `verification_method` is one of that party's keys, or that the attestor
+ * holds any fulfilment-attestor role. All three are a resolver's answer, not a local one.
+ * `assessFulfilment` makes those checks, and it asks about standing BEFORE it asks about the
+ * signature, because a record can be perfectly authentic and still come from somebody with
+ * no standing to make the statement.
+ *
+ * Proposed. Concept source: aeoess/agent-authority-lifecycle.
+ */
+export function issueAuthorityBoundFulfilment(input, privateKeyHex) {
+    for (const field of [
+        'bound_id',
+        'delegation_id',
+        'attestor',
+        'verification_method',
+        'attested_at',
+        'reason_code',
+    ]) {
+        const value = input[field];
+        if (typeof value !== 'string' || value.length === 0) {
+            throw new AuthorityBoundError('FULFILMENT_ISSUE_MALFORMED', `${field} must be a non-empty string`);
+        }
+    }
+    if (input.outcome !== 'fulfilled' && input.outcome !== 'not_fulfilled') {
+        throw new AuthorityBoundError('FULFILMENT_ISSUE_MALFORMED', 'outcome must be fulfilled or not_fulfilled');
+    }
+    const body = Object.freeze({
+        record_type: AUTHORITY_BOUND_FULFILMENT_TYPE,
+        bound_id: input.bound_id,
+        delegation_id: input.delegation_id,
+        attestor: input.attestor,
+        verification_method: input.verification_method,
+        attested_at: input.attested_at,
+        outcome: input.outcome,
+        reason_code: input.reason_code,
+        ...(input.detail !== undefined ? { detail: input.detail } : {}),
+    });
+    return Object.freeze({
+        ...body,
+        signature: signAuthorityBoundFulfilment(body, privateKeyHex),
+    });
+}
+/**
+ * Mint the OPTIONAL signed exhaustion record for a `BoundEvaluation` that reached
+ * `exhausted`.
+ *
+ * REFUSES on any other state, and the refusal is the design. A record that says "I found
+ * this bound exhausted" when the evaluation said `not_established` would be a boundary
+ * asserting a finding it did not make, which is precisely what CAND-01 forbids. There is no
+ * flag to override it.
+ *
+ * `evidence` is derived from the evaluation's own accepted fulfilment records, and it is
+ * EMPTY for a `use_count` or `budget` bound. That emptiness is honest rather than
+ * incomplete: the basis for those two is the boundary's own ledger, which is the one thing
+ * an outside verifier cannot check, and a placeholder there would hide the gap. The same
+ * limit applies to the whole record, and ./types.ts states it: the record attests the
+ * boundary's finding, not the state of the world, on the model draft-03 section 5.3.3 uses
+ * for an action result.
+ *
+ * Proposed. Concept source: aeoess/agent-authority-lifecycle, invariant L10.
+ */
+export function issueAuthorityExhaustion(evaluation, delegationId, input, privateKeyHex) {
+    if (evaluation === null || typeof evaluation !== 'object') {
+        throw new AuthorityBoundError('EXHAUSTION_ISSUE_MALFORMED', 'evaluation is not an object');
+    }
+    if (evaluation.bound_state !== 'exhausted') {
+        throw new AuthorityBoundError('EXHAUSTION_STATE_NOT_EXHAUSTED', `an exhaustion record can only be minted for bound_state exhausted, not ${String(evaluation.bound_state)}`);
+    }
+    for (const field of ['boundary', 'verification_method', 'found_at']) {
+        const value = input[field];
+        if (typeof value !== 'string' || value.length === 0) {
+            throw new AuthorityBoundError('EXHAUSTION_ISSUE_MALFORMED', `${field} must be a non-empty string`);
+        }
+    }
+    if (!BOUND_KINDS.includes(evaluation.kind)) {
+        throw new AuthorityBoundError('EXHAUSTION_ISSUE_MALFORMED', `kind must be one of ${BOUND_KINDS.join(', ')}`);
+    }
+    const body = Object.freeze({
+        record_type: AUTHORITY_EXHAUSTION_TYPE,
+        bound_id: evaluation.bound_id,
+        delegation_id: delegationId,
+        kind: evaluation.kind,
+        boundary: input.boundary,
+        verification_method: input.verification_method,
+        found_at: input.found_at,
+        reason_code: evaluation.reason_code,
+        evidence: Object.freeze(evaluation.fulfilments
+            .filter(a => a.accepted)
+            .map(a => Object.freeze({ attestor: a.attestor, attested_at: a.attested_at }))),
+        ...(input.detail !== undefined ? { detail: input.detail } : {}),
+    });
+    const exhaustionId = computeAuthorityExhaustionIdForWrite(body);
+    const unsigned = Object.freeze({ ...body, exhaustion_id: exhaustionId });
+    return Object.freeze({
+        ...unsigned,
+        signature: signAuthorityExhaustion(unsigned, privateKeyHex),
+    });
+}
+/**
+ * Verify an exhaustion record's bytes, identifier and signature.
+ *
+ * A `valid` answer here means: the record recomputes its own identifier, and the key
+ * resolved for its `boundary` at its `found_at` signed it. It does NOT mean the bound is
+ * exhausted. It means the named boundary said so, at that time, over those bytes. Treating
+ * the two as the same thing is the substitution draft-03's own security considerations warn
+ * about for receipts generally, verbatim: "Verifiers MUST treat receipts as evidence of what
+ * was attested, not as proof of what is true."
+ *
+ * Proposed.
+ */
+export function verifyAuthorityExhaustion(record, resolveVerificationKey) {
+    const failures = [];
+    const invalid = () => Object.freeze({ status: 'invalid', failures: Object.freeze([...failures]) });
+    if (record === null || typeof record !== 'object') {
+        failures.push('SCHEMA_INVALID');
+        return invalid();
+    }
+    if (record.record_type !== AUTHORITY_EXHAUSTION_TYPE) {
+        failures.push('UNSUPPORTED_RECORD_TYPE');
+        return invalid();
+    }
+    for (const field of [
+        'bound_id',
+        'delegation_id',
+        'boundary',
+        'verification_method',
+        'found_at',
+        'reason_code',
+        'exhaustion_id',
+        'signature',
+    ]) {
+        if (typeof record[field] !== 'string' || record[field].length === 0) {
+            failures.push('SCHEMA_INVALID');
+            return invalid();
+        }
+    }
+    if (!Array.isArray(record.evidence) || !BOUND_KINDS.includes(record.kind)) {
+        failures.push('SCHEMA_INVALID');
+        return invalid();
+    }
+    const { exhaustion_id: claimedId, signature: _signature, ...body } = record;
+    if (computeAuthorityExhaustionId(body) !== claimedId) {
+        failures.push('ID_MISMATCH');
+        return invalid();
+    }
+    const publicKey = resolveVerificationKey(record.boundary, record.verification_method, record.found_at);
+    if (typeof publicKey !== 'string' || publicKey.length === 0) {
+        failures.push('KEY_UNRESOLVED');
+        return invalid();
+    }
+    if (!verifyAuthorityExhaustionSignature(record, publicKey)) {
+        failures.push('SIGNATURE_INVALID');
+        return invalid();
+    }
+    return Object.freeze({ status: 'valid', failures: Object.freeze([]) });
+}
+//# sourceMappingURL=record.js.map