aismemory 0.7.2 → 0.7.4

package/dist/__tests__/ais-http.test.js

@@ -5,20 +5,39 @@ import { emitTelemetry } from '../telemetry.js';
 vi.mock('../telemetry.js', () => ({
     emitTelemetry: vi.fn(),
 }));
+const ORIGINAL_AIS_URL = process.env['AIS_URL'];
+function jsonResponse(body, status = 200) {
+    return new Response(JSON.stringify(body), { status });
+}
+function headerValue(init, name) {
+    const headers = init?.headers;
+    if (!headers)
+        return undefined;
+    if (headers instanceof Headers)
+        return headers.get(name) ?? undefined;
+    if (Array.isArray(headers)) {
+        const found = headers.find(([key]) => key.toLowerCase() === name.toLowerCase());
+        return found?.[1];
+    }
+    return headers[name];
+}
 describe('ais-http', () => {
     beforeEach(() => {
+        process.env['AIS_URL'] = 'https://ais.example.test';
         vi.mocked(emitTelemetry).mockClear();
     });
     afterEach(() => {
+        if (ORIGINAL_AIS_URL === undefined) {
+            delete process.env['AIS_URL'];
+        }
+        else {
+            process.env['AIS_URL'] = ORIGINAL_AIS_URL;
+        }
         vi.unstubAllGlobals();
     });
     it('aisPost returns JSON body on 200', async () => {
         const successBody = { success: true, data: { id: 'mem-1' } };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: true,
-            status: 200,
-            json: async () => successBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(successBody)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).resolves.toEqual(successBody);
     });
     it('aisPost returns TOKEN_EXPIRED auth body on 401 instead of throwing', async () => {
@@ -26,19 +45,11 @@ describe('ais-http', () => {
             success: false,
             error: { code: 'TOKEN_EXPIRED', message: 'expired' },
         };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 401,
-            json: async () => authBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(authBody, 401)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'stale-token')).resolves.toEqual(authBody);
     });
     it('aisPost throws AisHttpError on 500 non-auth failure', async () => {
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 500,
-            json: async () => ({ error: { code: 'INTERNAL', message: 'server error' } }),
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse({ error: { code: 'INTERNAL', message: 'server error' } }, 500)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).rejects.toBeInstanceOf(AisHttpError);
     });
     it('aisPost returns other auth-error bodies on 401 instead of throwing', async () => {
@@ -46,19 +57,11 @@ describe('ais-http', () => {
             success: false,
             error: { code: 'INVALID_TOKEN', message: 'token rejected' },
         };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 401,
-            json: async () => authBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(authBody, 401)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'bad-token')).resolves.toEqual(authBody);
     });
     it('aisPost throws AisHttpError for validation failures', async () => {
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 422,
-            json: async () => ({ error: { code: 'FLAGGED', message: 'blocked' } }),
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse({ error: { code: 'FLAGGED', message: 'blocked' } }, 422)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).rejects.toBeInstanceOf(AisHttpError);
         expect(emitTelemetry).toHaveBeenCalledWith(expect.objectContaining({
             event: 'ais.http.failure',
@@ -71,19 +74,11 @@ describe('ais-http', () => {
             success: false,
             error: { code: 'TOKEN_EXPIRED', message: 'expired' },
         };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 401,
-            json: async () => authBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(authBody, 401)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'stale-token')).resolves.toEqual(authBody);
     });
     it('aisPost emits telemetry and throws AisHttpError on non-2xx non-auth responses (CORBOT-8E2FCFD2)', async () => {
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 503,
-            json: async () => ({ error: { code: 'UNAVAILABLE', message: 'down' } }),
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse({ error: { code: 'UNAVAILABLE', message: 'down' } }, 503)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).rejects.toBeInstanceOf(AisHttpError);
         expect(emitTelemetry).toHaveBeenCalledWith(expect.objectContaining({
             event: 'ais.http.failure',
@@ -96,11 +91,7 @@ describe('ais-http', () => {
             success: false,
             error: { code: 'TOKEN_EXPIRED', message: 'expired' },
         };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 401,
-            json: async () => authBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(authBody, 401)));
         await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'stale-token')).resolves.toEqual(authBody);
     });
     it('aisGet returns auth-error bodies on 401 instead of throwing', async () => {
@@ -108,12 +99,49 @@ describe('ais-http', () => {
             success: false,
             error: { code: 'TOKEN_EXPIRED', message: 'expired' },
         };
-        vi.stubGlobal('fetch', vi.fn(async () => ({
-            ok: false,
-            status: 401,
-            json: async () => authBody,
-        })));
+        vi.stubGlobal('fetch', vi.fn(async () => jsonResponse(authBody, 401)));
         await expect(aisGet('/v1/agents/a1', 'stale-token')).resolves.toEqual(authBody);
     });
+    it('aisPost applies the documented default AIS_URL when unset', async () => {
+        delete process.env['AIS_URL'];
+        const fetchMock = vi.fn(async () => jsonResponse({ success: true }));
+        vi.stubGlobal('fetch', fetchMock);
+        await aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token');
+        const requestUrl = fetchMock.mock.calls[0]?.[0];
+        expect(String(requestUrl)).toBe('https://ais.agentsandswarms.ai/v1/agents/a1/memory');
+    });
+    it('aisPost throws when AIS_URL is set but not a valid URL', async () => {
+        process.env['AIS_URL'] = 'not-a-url';
+        const fetchMock = vi.fn(async () => jsonResponse({ success: true }));
+        vi.stubGlobal('fetch', fetchMock);
+        await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).rejects.toThrow('AIS_URL is not a valid URL');
+        expect(fetchMock).not.toHaveBeenCalled();
+    });
+    it('aisPost sends Authorization only when token is provided', async () => {
+        const fetchMock = vi.fn(async () => jsonResponse({ success: true }));
+        vi.stubGlobal('fetch', fetchMock);
+        await aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token');
+        await aisPost('/v1/agents/a1/memory', { content: 'x' });
+        const firstCall = fetchMock.mock.calls[0];
+        const secondCall = fetchMock.mock.calls[1];
+        if (!firstCall || !secondCall)
+            throw new Error('expected fetch calls');
+        expect(headerValue(firstCall[1], 'Authorization')).toBe('Bearer token');
+        expect(headerValue(secondCall[1], 'Authorization')).toBeUndefined();
+    });
+    it('aisPost normalizes paths and attaches an AbortSignal', async () => {
+        const fetchMock = vi.fn(async () => jsonResponse({ success: true }));
+        vi.stubGlobal('fetch', fetchMock);
+        await aisPost('v1/agents/a1/memory', { content: 'x' }, 'token');
+        const call = fetchMock.mock.calls[0];
+        if (!call)
+            throw new Error('expected fetch call');
+        expect(call[0]).toBe('https://ais.example.test/v1/agents/a1/memory');
+        expect(call[1]?.signal).toBeInstanceOf(AbortSignal);
+    });
+    it('aisPost throws with body context when AIS returns invalid JSON', async () => {
+        vi.stubGlobal('fetch', vi.fn(async () => new Response('service unavailable', { status: 503 })));
+        await expect(aisPost('/v1/agents/a1/memory', { content: 'x' }, 'token')).rejects.toThrow(/not valid JSON.*service unavailable/);
+    });
 });
 //# sourceMappingURL=ais-http.test.js.map

package/dist/__tests__/ais-http.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"ais-http.test.js","sourceRoot":"","sources":["../../src/__tests__/ais-http.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;CACvB,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7D,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW;SAC9B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CACvF,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;SAC3B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC;SAC7E,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE;SAC5D,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;SAC3B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC3F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;SACvE,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,GAAG;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;SAC3B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;SACxE,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,GAAG;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;SAC3B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;SAC3B,CAAC,CAAC,CACJ,CAAC;QAEF,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"ais-http.test.js","sourceRoot":"","sources":["../../src/__tests__/ais-http.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;CACvB,CAAC,CAAC,CAAC;AAEJ,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAEhD,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,IAAY;IAC9D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,OAAO,YAAY,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAChF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,0BAA0B,CAAC;QACpD,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,gBAAgB,CAAC;QAC5C,CAAC;QACD,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7D,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAChE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CACvF,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAClC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,CAAC,CAC5E,CACF,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE;SAC5D,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC3F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAClC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,CACtE,CACF,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,GAAG;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAClC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CACvE,CACF,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC7F,YAAY,CACb,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,GAAG;SAChB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAC7F,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE;SACrD,CAAC;QACF,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAClE,CAAC;QAEF,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAe,KAAK,IAAuB,EAAE,CAClE,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAChC,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAEjE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC;QACrC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAe,KAAK,IAAuB,EAAE,CAClE,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAChC,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtF,4BAA4B,CAC7B,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAe,KAAK,IAAuB,EAAE,CAClE,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAChC,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACxE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAe,KAAK,IAAuB,EAAE,CAClE,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAChC,CAAC;QACF,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAElC,MAAM,OAAO,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAEhE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,UAAU,CACX,OAAO,EACP,EAAE,CAAC,EAAE,CAAC,KAAK,IAAuB,EAAE,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAC3F,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtF,qCAAqC,CACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/auto-enroll-key.test.js

@@ -18,7 +18,7 @@ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
 import { mkdtempSync, rmSync, existsSync, readdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { enrollKeyIfNeeded, generateAndSaveKeypair } from '../key-auth.js';
+import { enrollKeyIfNeeded, generateAndSaveKeypair, hasEnrolledKey } from '../key-auth.js';
 // ───────────────────────────────────────────────────────────────────────────
 // Fixtures
 // ───────────────────────────────────────────────────────────────────────────
@@ -58,14 +58,15 @@ afterEach(() => {
 // enrollKeyIfNeeded
 // ───────────────────────────────────────────────────────────────────────────
 describe('enrollKeyIfNeeded', () => {
-    it('generates a key, registers it with AIS, and keeps it on disk', async () => {
+    it.each([undefined, 'owner', 'bonded'])('enrolls a user token with type %s and keeps its key on disk', async (type) => {
+        const token = fakeJwt({ user_id: TEST_USER_ID, tenant_id: 't-1', type });
         const { fetchImpl, requests } = stubFetch(200, {
             success: true,
             data: { id: 'key-1', label: 'auto' },
         });
         const result = await enrollKeyIfNeeded({
             aisUrl: TEST_AIS_URL,
-            token: OWNER_TOKEN,
+            token,
             keysDir: tmpKeysDir,
             fetchImpl,
         });
@@ -79,7 +80,7 @@ describe('enrollKeyIfNeeded', () => {
         const req = requests[0];
         expect(req.url).toBe(`${TEST_AIS_URL}/v1/users/me/keys`);
         expect(req.method).toBe('POST');
-        expect(req.headers['Authorization']).toBe(`Bearer ${OWNER_TOKEN}`);
+        expect(req.headers['Authorization']).toBe(`Bearer ${token}`);
         const body = req.body;
         expect(body.publicKey.kty).toBe('OKP');
         expect(body.publicKey.crv).toBe('Ed25519');
@@ -116,10 +117,12 @@ describe('enrollKeyIfNeeded', () => {
         expect(requests).toHaveLength(0);
         expect(readdirSync(tmpKeysDir)).toHaveLength(0);
     });
-    it('skips a provisional register token that only has agent id in sub', async () => {
+    it.each([undefined, TEST_USER_ID])('skips a provisional register token with user_id %s', async (userId) => {
         const agentId = 'a1b2c3d4-e5f6-7890-abcd-ef1234567890';
         const provisionalToken = fakeJwt({
             sub: agentId,
+            user_id: userId,
+            owner_id: '00000000-0000-0000-0000-000000000000',
             tenant_id: 'tenant-prov',
             agent_id: agentId,
             type: 'provisional',
@@ -132,9 +135,10 @@ describe('enrollKeyIfNeeded', () => {
             fetchImpl,
         });
         expect(result.enrolled).toBe(false);
-        expect(result.reason).toBe('no-user-claim');
+        expect(result.reason).toBe('provisional-token');
         expect(requests).toHaveLength(0);
         expect(readdirSync(tmpKeysDir)).toHaveLength(0);
+        expect(hasEnrolledKey({ keysDir: tmpKeysDir })).toBe(false);
     });
     it('treats a 409 duplicate-key response as success and keeps the key file', async () => {
         const { fetchImpl } = stubFetch(409, {

package/dist/__tests__/auto-enroll-key.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"auto-enroll-key.test.js","sourceRoot":"","sources":["../../src/__tests__/auto-enroll-key.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE3E,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAC5D,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAC/C,MAAM,aAAa,GAAG,iCAAiC,YAAY,EAAE,CAAC;AAEtE,wEAAwE;AACxE,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,GAAG,GAAG,CAAC,GAA4B,EAAU,EAAE,CACnD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AASzE,4EAA4E;AAC5E,SAAS,SAAS,CAAC,MAAc,EAAE,IAAa;IAI9C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAY,EAAE,IAAkB,EAAE,EAAE;QAC5D,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;YAChB,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAA2B;YACxD,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAA4B,CAAC;IAC9B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,IAAI,UAAkB,CAAC;AACvB,UAAU,CAAC,GAAG,EAAE;IACd,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YAC7C,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,oEAAoE;QACpE,6BAA6B;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,WAAW,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,GAAG,CAAC,IAA8D,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,sBAAsB,CAAC;YAC3B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,sCAAsC,CAAC;QACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC;YAC/B,GAAG,EAAE,OAAO;YACZ,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YACnC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;SACjC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YACnC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC5B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAuC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"auto-enroll-key.test.js","sourceRoot":"","sources":["../../src/__tests__/auto-enroll-key.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3F,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAC5D,MAAM,YAAY,GAAG,yBAAyB,CAAC;AAC/C,MAAM,aAAa,GAAG,iCAAiC,YAAY,EAAE,CAAC;AAEtE,wEAAwE;AACxE,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,GAAG,GAAG,CAAC,GAA4B,EAAU,EAAE,CACnD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzD,OAAO,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,MAAM,WAAW,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AASzE,4EAA4E;AAC5E,SAAS,SAAS,CAAC,MAAc,EAAE,IAAa;IAI9C,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,GAAY,EAAE,IAAkB,EAAE,EAAE;QAC5D,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;YAChB,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAA2B;YACxD,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAA4B,CAAC;IAC9B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,IAAI,UAAkB,CAAC;AACvB,UAAU,CAAC,GAAG,EAAE;IACd,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,6DAA6D,EAAE,KAAK,EAAE,IAAI,EAAiB,EAAE;QACnI,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YAC7C,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK;YACL,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC;QAC1D,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,oEAAoE;QACpE,6BAA6B;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,mBAAmB,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,IAA8D,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,sBAAsB,CAAC;YAC3B,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,oDAAoD,EAAE,KAAK,EAAE,MAAM,EAAiB,EAAE;QACvH,MAAM,OAAO,GAAG,sCAAsC,CAAC;QACvD,MAAM,gBAAgB,GAAG,OAAO,CAAC;YAC/B,GAAG,EAAE,OAAO;YACZ,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,sCAAsC;YAChD,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAEzF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YACnC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;SACjC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE;YACnC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC5B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAuC,CAAC;QAEzC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,UAAU;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/beacon-contract.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/beacon-contract.test.js

@@ -0,0 +1,106 @@
+import { generateKeyPairSync, sign } from 'node:crypto';
+import { describe, expect, it } from 'vitest';
+import { SyntheticBeaconVerifier, certificateBytes, bodyBytes } from './fixtures/beacon-contract.js';
+const identity = '00000000-0000-4000-8000-000000000001';
+const installation = '00000000-0000-4000-8000-000000000002';
+const owner = '00000000-0000-4000-8000-000000000003';
+const desk = '00000000-0000-4000-8000-000000000004';
+function fixture() {
+    const root = generateKeyPairSync('ed25519');
+    const signer = generateKeyPairSync('ed25519');
+    const certificate = {
+        purpose: 'lost-agent-beacon/v1', identity, installation, owner, desk,
+        publicKey: signer.publicKey.export({ type: 'spki', format: 'pem' }).toString(),
+        issuedAt: 1000, expiresAt: 1600,
+    };
+    const body = {
+        purpose: 'lost-agent-beacon/v1', identity, installation,
+        nonce: '0123456789abcdef0123456789abcdef', issuedAt: 1000, expiresAt: 1060,
+        line: 'where=cloud-vm; have=none; need=host,ais-bond,mcp,inbox',
+    };
+    return {
+        root: root.privateKey, signer: signer.privateKey, verifier: new SyntheticBeaconVerifier(root.publicKey),
+        envelope: {
+            certificate, body,
+            certificateSignature: sign(null, certificateBytes(certificate), root.privateKey).toString('base64url'),
+            signature: sign(null, bodyBytes(body), signer.privateKey).toString('base64url'),
+        },
+    };
+}
+function resign(envelope, signer, root) {
+    envelope.signature = sign(null, bodyBytes(envelope.body), signer).toString('base64url');
+    envelope.certificateSignature = sign(null, certificateBytes(envelope.certificate), root).toString('base64url');
+}
+describe('synthetic beacon contract (no delivery)', () => {
+    it('accepts a scoped signed report addressed only to certified owner and desk', () => {
+        const { verifier, envelope } = fixture();
+        expect(verifier.accept(envelope, 1000)).toEqual({ accepted: true, routes: [owner, desk] });
+        expect(verifier.accept(envelope, 1001)).toEqual({ accepted: false, reason: 'replay' });
+    });
+    it('deduplicates identical certified recipients', () => {
+        const { verifier, envelope, root, signer } = fixture();
+        envelope.certificate.desk = owner;
+        resign(envelope, signer, root);
+        expect(verifier.accept(envelope, 1000)).toEqual({ accepted: true, routes: [owner] });
+    });
+    it('rejects public identity without a signing capability', () => {
+        expect(fixture().verifier.accept({ identity }, 1000).accepted).toBe(false);
+    });
+    it.each(['owner', 'desk', 'publicKey'])('rejects certificate %s substitution', (field) => {
+        const { verifier, envelope } = fixture();
+        envelope.certificate[field] = field === 'publicKey' ? fixture().envelope.certificate.publicKey : installation;
+        expect(verifier.accept(envelope, 1000)).toEqual({ accepted: false, reason: 'untrusted-certificate' });
+    });
+    it('rejects an attacker root and signer despite matching public identity', () => {
+        const legitimate = fixture();
+        expect(legitimate.verifier.accept(fixture().envelope, 1000).accepted).toBe(false);
+        legitimate.envelope.signature = sign(null, bodyBytes(legitimate.envelope.body), fixture().signer).toString('base64url');
+        expect(legitimate.verifier.accept(legitimate.envelope, 1000)).toEqual({ accepted: false, reason: 'invalid-signature' });
+    });
+    it.each(['identity', 'installation', 'line', 'nonce'])('rejects body %s tampering', (field) => {
+        const { verifier, envelope } = fixture();
+        envelope.body[field] = field === 'line' ? 'where=local-mac; have=ais; need=none'
+            : field === 'nonce' ? 'f'.repeat(32) : desk;
+        expect(verifier.accept(envelope, 1000).accepted).toBe(false);
+    });
+    it.each([999, 1060, 1600])('rejects future/expired evidence at %i including boundaries', (now) => {
+        const { verifier, envelope } = fixture();
+        expect(verifier.accept(envelope, now).accepted).toBe(false);
+    });
+    it.each(['long-body', 'long-certificate', 'body-outside-certificate', 'revoked', 'invalid-key'])('rejects %s', (condition) => {
+        const { verifier, envelope, root, signer } = fixture();
+        if (condition === 'long-body')
+            envelope.body.expiresAt = 1061;
+        if (condition === 'long-certificate')
+            envelope.certificate.expiresAt = 1601;
+        if (condition === 'body-outside-certificate')
+            envelope.certificate.expiresAt = 1050;
+        if (condition === 'invalid-key')
+            envelope.certificate.publicKey = 'invalid';
+        resign(envelope, signer, root);
+        const validator = condition === 'revoked' ? new SyntheticBeaconVerifier(root, new Set([installation])) : verifier;
+        expect(validator.accept(envelope, 1000).accepted).toBe(false);
+    });
+    it.each(['recipient', 'bearerToken', 'fleetClaim', 'inboxRead'])('rejects authority expansion field %s', (field) => {
+        const { verifier, envelope } = fixture();
+        expect(verifier.accept({ ...envelope, body: { ...envelope.body, [field]: 'forbidden' } }, 1000).accepted).toBe(false);
+    });
+    it.each(['where=cloud-vm; have=none; need=host\nsecret', 'where=private-hostname; have=none; need=host', 'where=cloud-vm; have=token; need=https://evil.example'])('rejects disclosure outside the enum line', (line) => {
+        const { verifier, envelope, root, signer } = fixture();
+        envelope.body.line = line;
+        resign(envelope, signer, root);
+        expect(verifier.accept(envelope, 1000).accepted).toBe(false);
+    });
+    it('enforces minute and rolling hour limits across certificate renewal', () => {
+        const { verifier, envelope, root, signer } = fixture();
+        for (const [index, now] of [1000, 1059, 1060, 1120, 1180, 4600].entries()) {
+            envelope.body.nonce = index.toString(16).padStart(32, '0');
+            envelope.body.issuedAt = envelope.certificate.issuedAt = now;
+            envelope.body.expiresAt = now + 60;
+            envelope.certificate.expiresAt = now + 600;
+            resign(envelope, signer, root);
+            expect(verifier.accept(envelope, now).accepted).toBe(![1059, 1180].includes(now));
+        }
+    });
+});
+//# sourceMappingURL=beacon-contract.test.js.map

package/dist/__tests__/beacon-contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beacon-contract.test.js","sourceRoot":"","sources":["../../src/__tests__/beacon-contract.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,SAAS,EAAiB,MAAM,+BAA+B,CAAC;AAEpH,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAC5D,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG;QAClB,OAAO,EAAE,sBAA+B,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI;QAC7E,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC9E,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;KAChC,CAAC;IACF,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,sBAA+B,EAAE,QAAQ,EAAE,YAAY;QAChE,KAAK,EAAE,kCAAkC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;QAC1E,IAAI,EAAE,yDAAyD;KAChE,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;QACvG,QAAQ,EAAE;YACR,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YACtG,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAChF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,QAAkB,EAAE,MAAiB,EAAE,IAAe;IACpE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxF,QAAQ,CAAC,oBAAoB,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjH,CAAC;AAED,QAAQ,CAAC,yCAAyC,EAAE,GAAS,EAAE;IAC7D,EAAE,CAAC,2EAA2E,EAAE,GAAS,EAAE;QACzF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC3D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC;QAClC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAS,EAAE;QACpE,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC,CAAC,qCAAqC,EAAE,CAAC,KAAK,EAAQ,EAAE;QACtG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9G,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAS,EAAE;QACpF,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,UAAU,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxH,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC,CAAC,2BAA2B,EAAE,CAAC,KAAK,EAAQ,EAAE;QAC3G,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,sCAAsC;YAC9E,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,4DAA4D,EAAE,CAAC,GAAG,EAAQ,EAAE;QACrG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,SAAS,EAAQ,EAAE;QACjI,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,IAAI,SAAS,KAAK,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9D,IAAI,SAAS,KAAK,kBAAkB;YAAE,QAAQ,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;QAC5E,IAAI,SAAS,KAAK,0BAA0B;YAAE,QAAQ,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;QACpF,IAAI,SAAS,KAAK,aAAa;YAAE,QAAQ,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5E,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,uBAAuB,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClH,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAQ,EAAE;QACvH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,8CAA8C,EAAE,8CAA8C,EAAE,uDAAuD,CAAC,CAAC,CAAC,0CAA0C,EAAE,CAAC,IAAI,EAAQ,EAAE;QAC5N,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAS,EAAE;QAClF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1E,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,CAAC;YACnC,QAAQ,CAAC,WAAW,CAAC,SAAS,GAAG,GAAG,GAAG,GAAG,CAAC;YAC3C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/credential-isolation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/credential-isolation.test.js

@@ -0,0 +1,61 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { mkdtempSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { credentialsFilePath, loadOAuthCredentials, saveOAuthCredentials, } from '../oauth-credentials.js';
+import { loadAgentPreference, saveAgentPreference } from '../agent-preference.js';
+describe('credential store isolation', () => {
+    let home;
+    const shared = {
+        token: 'test-shared-token',
+        agentId: 'shared',
+        tenantId: 'tenant',
+        expiresAt: '2099-01-01T00:00:00Z',
+    };
+    beforeEach(() => {
+        home = mkdtempSync(join(tmpdir(), 'ais-isolation-'));
+        vi.stubEnv('AIS_AGENT_ID', '');
+        vi.stubEnv('AIS_CREDENTIALS_FILE', '');
+        saveOAuthCredentials(shared, home);
+    });
+    afterEach(() => {
+        vi.unstubAllEnvs();
+        rmSync(home, { recursive: true, force: true });
+    });
+    it('does not read, migrate or overwrite shared credentials when an agent is selected', () => {
+        const file = credentialsFilePath(home);
+        const before = statSync(file).mtimeMs;
+        vi.stubEnv('AIS_AGENT_ID', 'agent-a');
+        expect(loadOAuthCredentials(home)).toBeNull();
+        expect(loadAgentPreference(home, () => true)).toBeNull();
+        saveOAuthCredentials({ ...shared, agentId: 'agent-a' }, home);
+        expect(loadAgentPreference(home, () => true)?.agentId).toBe('agent-a');
+        saveAgentPreference({ agentId: 'agent-a', tenantId: 'tenant' }, home);
+        vi.stubEnv('AIS_AGENT_ID', 'agent-b');
+        expect(loadAgentPreference(home)).toBeNull();
+        expect(JSON.parse(readFileSync(file, 'utf8'))).toEqual(shared);
+        expect(statSync(file).mtimeMs).toBe(before);
+    });
+    it('honors an absolute override for both OAuth and preference persistence', () => {
+        const file = join(home, 'isolated', 'custom.json');
+        vi.stubEnv('AIS_AGENT_ID', 'agent-a');
+        vi.stubEnv('AIS_CREDENTIALS_FILE', file);
+        expect(credentialsFilePath(home)).toBe(file);
+        expect(loadOAuthCredentials(home)).toBeNull();
+        saveOAuthCredentials(shared, home);
+        expect(loadOAuthCredentials(home)).toEqual(shared);
+        saveAgentPreference({ agentId: 'agent-a', tenantId: 'tenant' }, home);
+        expect(JSON.parse(readFileSync(file, 'utf8')).agentId).toBe('agent-a');
+        expect(statSync(file).mode & 0o777).toBe(0o600);
+        expect(JSON.parse(readFileSync(join(home, '.aismemory', 'credentials.json'), 'utf8'))).toEqual(shared);
+    });
+    it.each(['..', '../escape', 'a/b', 'a\\b'])('rejects unsafe agent path component %s', (agent) => {
+        vi.stubEnv('AIS_AGENT_ID', agent);
+        expect(() => credentialsFilePath(home)).toThrow(/AIS_AGENT_ID/);
+    });
+    it('rejects relative overrides instead of silently using shared credentials', () => {
+        vi.stubEnv('AIS_CREDENTIALS_FILE', 'relative.json');
+        expect(() => credentialsFilePath(home)).toThrow(/absolute/);
+    });
+});
+//# sourceMappingURL=credential-isolation.test.js.map

package/dist/__tests__/credential-isolation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-isolation.test.js","sourceRoot":"","sources":["../../src/__tests__/credential-isolation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElF,QAAQ,CAAC,4BAA4B,EAAE,GAAS,EAAE;IAChD,IAAI,IAAY,CAAC;IACjB,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,sBAAsB;KAClC,CAAC;IAEF,UAAU,CAAC,GAAS,EAAE;QACpB,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACrD,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACvC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAS,EAAE;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,GAAS,EAAE;QAChG,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACtC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,oBAAoB,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAY,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChF,mBAAmB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACtE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAS,EAAE;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACnD,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACtC,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9C,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,mBAAmB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAC5F,MAAM,CACP,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CACzC,wCAAwC,EACxC,CAAC,KAAa,EAAQ,EAAE;QACtB,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,GAAW,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1E,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAS,EAAE;QACvF,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;QACpD,MAAM,CAAC,GAAW,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/credential-resolution.test.d.ts

@@ -0,0 +1 @@
+export {};