ftown 0.19.53 → 0.19.55

package/dist/security/bridge/account-state.d.ts

@@ -0,0 +1,471 @@
+import { z } from 'zod';
+import type { AccountHistory, StoredAccountTrust } from '../account-protocol.js';
+import type { SecurityErrorCode } from '../protocol.js';
+export declare const accountCheckpointSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    ownerId: z.ZodString;
+    rootId: z.ZodString;
+    head: z.ZodString;
+    revision: z.ZodNumber;
+    devices: z.ZodArray<z.ZodObject<{
+        endpoint: z.ZodEffects<z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            id: z.ZodString;
+            ownerId: z.ZodString;
+            kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+            publicKey: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>;
+        signingPublicKey: z.ZodString;
+        label: z.ZodString;
+        approvedAt: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }, {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }>, "many">;
+    bridges: z.ZodArray<z.ZodObject<{
+        bridgeId: z.ZodString;
+        endpoint: z.ZodEffects<z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            id: z.ZodString;
+            ownerId: z.ZodString;
+            kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+            publicKey: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }, {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        }>;
+        label: z.ZodString;
+        approvedAt: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }, {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }>, "many">;
+    revokedDeviceIds: z.ZodArray<z.ZodString, "many">;
+    revokedBridgeIds: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    ownerId: string;
+    rootId: string;
+    revision: number;
+    head: string;
+    devices: {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }[];
+    bridges: {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }[];
+    revokedDeviceIds: string[];
+    revokedBridgeIds: string[];
+}, {
+    version: 1;
+    ownerId: string;
+    rootId: string;
+    revision: number;
+    head: string;
+    devices: {
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+        signingPublicKey: string;
+    }[];
+    bridges: {
+        bridgeId: string;
+        endpoint: {
+            id: string;
+            version: 1;
+            ownerId: string;
+            kind: "bridge" | "browser" | "mcp" | "local-cli";
+            publicKey: string;
+        };
+        label: string;
+        approvedAt: string;
+    }[];
+    revokedDeviceIds: string[];
+    revokedBridgeIds: string[];
+}>;
+export declare const verifiedAccountSchema: z.ZodObject<{
+    history: z.ZodType<AccountHistory, z.ZodTypeDef, AccountHistory>;
+    checkpoint: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        ownerId: z.ZodString;
+        rootId: z.ZodString;
+        head: z.ZodString;
+        revision: z.ZodNumber;
+        devices: z.ZodArray<z.ZodObject<{
+            endpoint: z.ZodEffects<z.ZodObject<{
+                version: z.ZodLiteral<1>;
+                id: z.ZodString;
+                ownerId: z.ZodString;
+                kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                publicKey: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>;
+            signingPublicKey: z.ZodString;
+            label: z.ZodString;
+            approvedAt: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }, {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }>, "many">;
+        bridges: z.ZodArray<z.ZodObject<{
+            bridgeId: z.ZodString;
+            endpoint: z.ZodEffects<z.ZodObject<{
+                version: z.ZodLiteral<1>;
+                id: z.ZodString;
+                ownerId: z.ZodString;
+                kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                publicKey: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }, {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            }>;
+            label: z.ZodString;
+            approvedAt: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }, {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }>, "many">;
+        revokedDeviceIds: z.ZodArray<z.ZodString, "many">;
+        revokedBridgeIds: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    }, {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    }>;
+}, "strict", z.ZodTypeAny, {
+    history: AccountHistory;
+    checkpoint: {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    };
+}, {
+    history: AccountHistory;
+    checkpoint: {
+        version: 1;
+        ownerId: string;
+        rootId: string;
+        revision: number;
+        head: string;
+        devices: {
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+            signingPublicKey: string;
+        }[];
+        bridges: {
+            bridgeId: string;
+            endpoint: {
+                id: string;
+                version: 1;
+                ownerId: string;
+                kind: "bridge" | "browser" | "mcp" | "local-cli";
+                publicKey: string;
+            };
+            label: string;
+            approvedAt: string;
+        }[];
+        revokedDeviceIds: string[];
+        revokedBridgeIds: string[];
+    };
+}>;
+export declare const storedAccountSchema: z.ZodType<StoredAccountTrust>;
+/** A restart deliberately has no running-process grace until a valid server read. */
+export declare class AccountConnectivity {
+    private readonly now;
+    private readonly monotonic;
+    private ready;
+    private renewedAt;
+    private lastMonotonic;
+    private observedAt;
+    private failure;
+    constructor(now: () => number, monotonic: () => number);
+    observed(stored: StoredAccountTrust): number;
+    renew(stored: StoredAccountTrust): void;
+    check(stored: StoredAccountTrust): void;
+    block(code: SecurityErrorCode): void;
+    highwater(): number;
+}

package/dist/security/bridge/account-state.js

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+import { ACCOUNT_TRUST_LIMITS, parseAccountHistory } from '../account-crypto.js';
+import { endpointSchema } from './metadata.js';
+import { BridgeSecurityError } from './errors.js';
+const id = z.string().regex(/^[A-Za-z0-9_-]{43}$/);
+const timestamp = z.number().int().nonnegative().finite();
+const device = z.object({ endpoint: endpointSchema, signingPublicKey: z.string().regex(/^[A-Za-z0-9_-]{87}$/),
+    label: z.string().max(200), approvedAt: z.string().datetime() }).strict();
+const bridge = z.object({ bridgeId: z.string().regex(/^[A-Za-z0-9_-]{1,200}$/), endpoint: endpointSchema,
+    label: z.string().max(200), approvedAt: z.string().datetime() }).strict();
+export const accountCheckpointSchema = z.object({ version: z.literal(1), ownerId: z.string().uuid(), rootId: id, head: id,
+    revision: z.number().int().min(0).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+    devices: z.array(device).max(ACCOUNT_TRUST_LIMITS.maxDevices), bridges: z.array(bridge).max(ACCOUNT_TRUST_LIMITS.maxBridges),
+    revokedDeviceIds: z.array(id).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+    revokedBridgeIds: z.array(z.string().regex(/^[A-Za-z0-9_-]{1,200}$/)).max(ACCOUNT_TRUST_LIMITS.maxTransitions),
+}).strict();
+export const verifiedAccountSchema = z.object({
+    history: z.custom(value => { try {
+        parseAccountHistory(value);
+        return true;
+    }
+    catch {
+        return false;
+    } }),
+    checkpoint: accountCheckpointSchema,
+}).strict();
+export const storedAccountSchema = verifiedAccountSchema.extend({
+    lastServerReadAt: timestamp, lastObservedAt: timestamp,
+}).strict();
+/** A restart deliberately has no running-process grace until a valid server read. */
+export class AccountConnectivity {
+    now;
+    monotonic;
+    ready = false;
+    renewedAt = 0;
+    lastMonotonic = 0;
+    observedAt = 0;
+    failure = null;
+    constructor(now, monotonic) {
+        this.now = now;
+        this.monotonic = monotonic;
+    }
+    observed(stored) {
+        const now = this.now();
+        const highwater = Math.max(this.observedAt, stored.lastObservedAt, stored.lastServerReadAt);
+        if (!Number.isSafeInteger(now) || now < highwater) {
+            this.failure = 'account_offline_expired';
+            throw new BridgeSecurityError('account_offline_expired');
+        }
+        this.observedAt = now;
+        return now;
+    }
+    renew(stored) {
+        this.observed(stored);
+        const monotonic = this.monotonic();
+        if (!Number.isFinite(monotonic) || monotonic < this.lastMonotonic)
+            throw new BridgeSecurityError('account_offline_expired');
+        this.lastMonotonic = monotonic;
+        this.renewedAt = monotonic;
+        this.ready = true;
+        this.failure = null;
+    }
+    check(stored) {
+        const now = this.observed(stored);
+        const monotonic = this.monotonic();
+        if (this.failure)
+            throw new BridgeSecurityError(this.failure);
+        if (!this.ready || !Number.isFinite(monotonic) || monotonic < this.lastMonotonic
+            || monotonic - this.renewedAt >= ACCOUNT_TRUST_LIMITS.offlineGraceMs
+            || now - stored.lastServerReadAt >= ACCOUNT_TRUST_LIMITS.offlineGraceMs) {
+            throw new BridgeSecurityError('account_offline_expired');
+        }
+        this.lastMonotonic = monotonic;
+    }
+    block(code) { this.failure = code; }
+    highwater() { return this.observedAt; }
+}
+//# sourceMappingURL=account-state.js.map

package/dist/security/bridge/account-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-state.js","sourceRoot":"","sources":["../../../src/security/bridge/account-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGjF,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACnD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC;AAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,QAAQ,EAAE,cAAc;IACtG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;IACrH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,UAAU,CAAC;IAC5H,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;IACtE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,cAAc,CAAC;CAC/G,CAAC,CAAC,MAAM,EAAE,CAAC;AACd,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAiB,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC;QAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACxH,UAAU,EAAE,uBAAuB;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,mBAAmB,GAAkC,qBAAqB,CAAC,MAAM,CAAC;IAC7F,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,qFAAqF;AACrF,MAAM,OAAO,mBAAmB;IAMD;IAAoC;IALzD,KAAK,GAAG,KAAK,CAAC;IACd,SAAS,GAAG,CAAC,CAAC;IACd,aAAa,GAAG,CAAC,CAAC;IAClB,UAAU,GAAG,CAAC,CAAC;IACf,OAAO,GAA6B,IAAI,CAAC;IACjD,YAA6B,GAAiB,EAAmB,SAAuB;QAA3D,QAAG,GAAH,GAAG,CAAc;QAAmB,cAAS,GAAT,SAAS,CAAc;IAAG,CAAC;IAC5F,QAAQ,CAAC,MAA0B;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,GAAG,yBAAyB,CAAC;YACzC,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,CAAC,MAA0B;QAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC5H,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,MAA0B;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,aAAa;eAC3E,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,oBAAoB,CAAC,cAAc;eACjE,GAAG,GAAG,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,cAAc,EAAE,CAAC;YAC1E,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,IAAuB,IAAU,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IAC7D,SAAS,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;CAChD"}

package/dist/security/bridge/execute.js

@@ -25,7 +25,8 @@ export async function executeSecurePacket(security, packet, route, dispatch, adm
     catch (error) {
         // Never authenticate an error on behalf of an unauthenticated/tampered packet.
         if (!verified && (!(error instanceof BridgeSecurityError)
-            || !['permission_denied', 'epoch_changed', 'expired', 'replayed', 'capacity_exceeded', 'audit_unavailable'].includes(error.code)))
+            || (!['permission_denied', 'epoch_changed', 'expired', 'replayed', 'capacity_exceeded', 'audit_unavailable', 'invalid_account_trust'].includes(error.code)
+                && !error.code.startsWith('account_'))))
             throw error;
         const code = error instanceof BridgeSecurityError ? error.code : dispatchStarted ? 'outcome_unknown' : 'permission_denied';
         if (verified)

package/dist/security/bridge/execute.js.map

@@ -1 +1 @@
-{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../src/security/bridge/execute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAA+B,EAAE,MAAyC,EAClH,KAA8B,EAAE,QAAoE,EACpG,SAAwF;IACxF,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3H,IAAI,QAAyC,CAAC;IAC9C,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACtI,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,KAAK,uBAAuB,CAAC;QACnI,IAAI,CAAC,UAAU;YAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,eAAe,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACrI,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjH,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;QAC9C,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAC1H,UAAU,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClI,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACrJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC;eACpD,CAAC,CAAC,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC;QACjJ,MAAM,IAAI,GAAG,KAAK,YAAY,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC3H,IAAI,QAAQ;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvH,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;YACrH,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACrI,CAAC;AACH,CAAC"}
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../src/security/bridge/execute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAA+B,EAAE,MAAyC,EAClH,KAA8B,EAAE,QAAoE,EACpG,SAAwF;IACxF,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,OAAO,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3H,IAAI,QAAyC,CAAC;IAC9C,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACtI,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,KAAK,uBAAuB,CAAC;QACnI,IAAI,CAAC,UAAU;YAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7E,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,eAAe,GAAG,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACrI,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjH,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;QAC9C,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAC1H,UAAU,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClI,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACrJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC;eACpD,CAAC,CAAC,CAAC,mBAAmB,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;mBACrJ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,YAAY,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC3H,IAAI,QAAQ;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvH,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;YACrH,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACrI,CAAC;AACH,CAAC"}