sealbridge 0.0.1 → 0.2.0

package/dist/packages/core/dist/receipts.js

@@ -0,0 +1,67 @@
+// SPDX-License-Identifier: Apache-2.0
+import { randomUUID } from 'node:crypto';
+import { digest, encryptEnvelopePayload, signPayload, verifySigned } from './crypto.js';
+import { validateSchema } from './schema.js';
+export function signApproval(taskId, gate, target, key, decision = 'APPROVED') {
+    return signPayload({
+        type: 'ApprovalReceipt',
+        receiptId: randomUUID(),
+        taskId,
+        gate,
+        targetDigest: digest(target),
+        decision,
+        approvedAt: new Date().toISOString(),
+    }, key);
+}
+export function verifyApproval(receipt, ownerDid, taskId, gate, target) {
+    try {
+        validateSchema('approval-receipt', receipt);
+        const p = receipt.payload;
+        return (verifySigned(receipt, ownerDid) &&
+            p.taskId === taskId &&
+            p.gate === gate &&
+            p.targetDigest === digest(target) &&
+            p.decision === 'APPROVED');
+    }
+    catch {
+        return false;
+    }
+}
+export function signUsage(payload, key) {
+    const r = signPayload(payload, key);
+    validateSchema('usage-receipt', r);
+    return r;
+}
+export function signAck(payload, key) {
+    if (payload.receiverDid !== key.did)
+        throw new Error('ACK_RECEIVER');
+    return signPayload(payload, key);
+}
+export function signEnvelope(payload, key, options) {
+    const envelope = {
+        ...payload,
+        type: 'SignedEnvelope',
+        envelopeId: randomUUID(),
+        senderDid: key.did,
+    };
+    if (options?.encrypt)
+        envelope.payload = encryptEnvelopePayload(envelope.payload, {
+            taskId: envelope.taskId,
+            seq: envelope.seq,
+            eventType: envelope.eventType,
+            senderDid: envelope.senderDid,
+            recipientDid: envelope.recipientDid,
+        });
+    return signPayload(envelope, key);
+}
+export function verifyEnvelope(envelope, recipientDid) {
+    try {
+        validateSchema('envelope', envelope);
+        return (verifySigned(envelope, envelope.payload.senderDid) &&
+            (!recipientDid || envelope.payload.recipientDid === recipientDid));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=receipts.js.map

package/dist/packages/core/dist/receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.js","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAW7C,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,IAAU,EACV,MAAe,EACf,GAAY,EACZ,WAAiC,UAAU;IAE3C,OAAO,WAAW,CAChB;QACE,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,UAAU,EAAE;QACvB,MAAM;QACN,IAAI;QACJ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5B,QAAQ;QACR,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,EACD,GAAG,CACJ,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAC5B,OAAwB,EACxB,QAAgB,EAChB,MAAc,EACd,IAAU,EACV,MAAe;IAEf,IAAI,CAAC;QACH,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAC1B,OAAO,CACL,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC;YAC/B,CAAC,CAAC,MAAM,KAAK,MAAM;YACnB,CAAC,CAAC,IAAI,KAAK,IAAI;YACf,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAC1B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,OAAc,EAAE,GAAY;IACpD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpC,cAAc,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,OAAY,EAAE,GAAY;IAChD,IAAI,OAAO,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AACD,MAAM,UAAU,YAAY,CAC1B,OAA4D,EAC5D,GAAY,EACZ,OAA+B;IAE/B,MAAM,QAAQ,GAAa;QACzB,GAAG,OAAO;QACV,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,UAAU,EAAE;QACxB,SAAS,EAAE,GAAG,CAAC,GAAG;KACnB,CAAC;IACF,IAAI,OAAO,EAAE,OAAO;QAClB,QAAQ,CAAC,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE;YAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAC;IACL,OAAO,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,YAAqB;IAC5E,IAAI,CAAC;QACH,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO,CACL,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;YAClD,CAAC,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/packages/core/dist/relay-auth.d.ts

@@ -0,0 +1,40 @@
+import type { KeyPair } from './types.js';
+export type RelayAuthAction = 'receive' | 'stream' | 'subscribe';
+export interface RelayAuthPayload {
+    type: 'RelayAuth';
+    recipientDid: string;
+    action: RelayAuthAction;
+    timestamp: string;
+    nonce: string;
+    /** Canonical destination origin. `ws:`/`wss:` are stored as `http:`/`https:`. */
+    origin?: string;
+}
+export interface CreateRelayAuthOptions {
+    action?: RelayAuthAction;
+    now?: string;
+    nonce?: string;
+    /** Destination relay URL or origin. Normalized before it is signed. */
+    origin?: string;
+    /** Alias of `origin` for callers that have a relay URL. */
+    relayUrl?: string;
+}
+export interface VerifyRelayAuthOptions {
+    now?: number;
+    maxSkewMs?: number;
+    expectedOrigin?: string;
+    requireOrigin?: boolean;
+}
+export interface RelayAuthVerification {
+    valid: boolean;
+    nonce?: string;
+    action?: RelayAuthAction;
+    error?: string;
+    reason?: string;
+}
+/**
+ * Canonical origin for HTTP, SSE, and WebSocket on the same host:port.
+ * `ws:` becomes `http:` and `wss:` becomes `https:` before `origin` is taken.
+ */
+export declare function normalizeRelayOrigin(urlOrOrigin: string): string;
+export declare function createRelayAuthToken(recipient: KeyPair, options?: CreateRelayAuthOptions): string;
+export declare function verifyRelayAuthToken(token: string, expectedRecipientDid: string, options?: VerifyRelayAuthOptions): RelayAuthVerification;

package/dist/packages/core/dist/relay-auth.js

@@ -0,0 +1,106 @@
+// SPDX-License-Identifier: Apache-2.0
+import { randomUUID } from 'node:crypto';
+import { signPayload, verifySigned } from './crypto.js';
+const RELAY_AUTH_ACTIONS = new Set(['receive', 'stream', 'subscribe']);
+/**
+ * Canonical origin for HTTP, SSE, and WebSocket on the same host:port.
+ * `ws:` becomes `http:` and `wss:` becomes `https:` before `origin` is taken.
+ */
+export function normalizeRelayOrigin(urlOrOrigin) {
+    if (typeof urlOrOrigin !== 'string' || !urlOrOrigin.trim())
+        throw new Error('INVALID_RELAY_ORIGIN');
+    let url;
+    try {
+        url = new URL(urlOrOrigin.trim());
+    }
+    catch {
+        throw new Error('INVALID_RELAY_ORIGIN');
+    }
+    if (url.protocol === 'ws:')
+        url.protocol = 'http:';
+    else if (url.protocol === 'wss:')
+        url.protocol = 'https:';
+    else if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        throw new Error('INVALID_RELAY_ORIGIN');
+    if (!url.host || url.origin === 'null')
+        throw new Error('INVALID_RELAY_ORIGIN');
+    return url.origin.toLowerCase();
+}
+export function createRelayAuthToken(recipient, options = {}) {
+    const rawOrigin = options.origin ?? options.relayUrl;
+    const payload = {
+        type: 'RelayAuth',
+        recipientDid: recipient.did,
+        action: options.action ?? 'receive',
+        timestamp: options.now ?? new Date().toISOString(),
+        nonce: options.nonce ?? randomUUID(),
+        ...(rawOrigin !== undefined ? { origin: normalizeRelayOrigin(rawOrigin) } : {}),
+    };
+    return Buffer.from(JSON.stringify(signPayload(payload, recipient))).toString('base64url');
+}
+function originFailure(code) {
+    return { valid: false, error: code, reason: code };
+}
+function checkRelayAuthOrigin(origin, options) {
+    const hasOrigin = typeof origin === 'string' && origin.trim().length > 0;
+    if (origin !== undefined && !hasOrigin) {
+        if (options.expectedOrigin !== undefined)
+            return originFailure('RELAY_AUTH_ORIGIN_MISMATCH');
+        if (options.requireOrigin)
+            return originFailure('RELAY_AUTH_ORIGIN_REQUIRED');
+        return { valid: false, error: 'RELAY_UNAUTHORIZED' };
+    }
+    if (!hasOrigin) {
+        if (options.requireOrigin)
+            return originFailure('RELAY_AUTH_ORIGIN_REQUIRED');
+        return undefined;
+    }
+    let canonical;
+    try {
+        canonical = normalizeRelayOrigin(origin);
+    }
+    catch {
+        if (options.expectedOrigin !== undefined)
+            return originFailure('RELAY_AUTH_ORIGIN_MISMATCH');
+        return { valid: false, error: 'RELAY_UNAUTHORIZED' };
+    }
+    if (options.expectedOrigin === undefined)
+        return undefined;
+    try {
+        if (canonical !== normalizeRelayOrigin(options.expectedOrigin))
+            return originFailure('RELAY_AUTH_ORIGIN_MISMATCH');
+    }
+    catch {
+        return originFailure('RELAY_AUTH_ORIGIN_MISMATCH');
+    }
+    return undefined;
+}
+export function verifyRelayAuthToken(token, expectedRecipientDid, options = {}) {
+    try {
+        if (typeof token !== 'string' || token.length > 16384 || !/^[A-Za-z0-9_-]+$/.test(token))
+            throw new Error();
+        const signed = JSON.parse(Buffer.from(token, 'base64url').toString('utf8')), p = signed.payload;
+        const now = options.now ?? Date.now(), skew = options.maxSkewMs ?? 300000;
+        if (!verifySigned(signed, expectedRecipientDid) ||
+            p.type !== 'RelayAuth' ||
+            p.recipientDid !== expectedRecipientDid ||
+            !RELAY_AUTH_ACTIONS.has(p.action) ||
+            typeof p.nonce !== 'string' ||
+            !p.nonce.trim() ||
+            typeof p.timestamp !== 'string' ||
+            !Number.isFinite(Date.parse(p.timestamp)) ||
+            !Number.isFinite(now) ||
+            !Number.isFinite(skew) ||
+            skew < 0 ||
+            Math.abs(now - Date.parse(p.timestamp)) > skew)
+            throw new Error();
+        const origin = checkRelayAuthOrigin(p.origin, options);
+        if (origin)
+            return origin;
+        return { valid: true, nonce: p.nonce, action: p.action };
+    }
+    catch {
+        return { valid: false, error: 'RELAY_UNAUTHORIZED' };
+    }
+}
+//# sourceMappingURL=relay-auth.js.map

package/dist/packages/core/dist/relay-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-auth.js","sourceRoot":"","sources":["../src/relay-auth.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmCxD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK;QAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;SAC9C,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;SACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAC5D,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAAkB,EAClB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC;IACrD,MAAM,OAAO,GAAqB;QAChC,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,SAAS,CAAC,GAAG;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;QACnC,SAAS,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,EAAE;QACpC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CACpB,IAAiE;IAEjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAkC,EAClC,OAA+B;IAE/B,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,aAAa;YAAE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,aAAa;YAAE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;QAC7F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,oBAAoB,CAAC,OAAO,CAAC,cAAc,CAAC;YAC5D,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,oBAA4B,EAC5B,UAAkC,EAAE;IAEpC,IAAI,CAAC;QACH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YACtF,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrB,EAC7B,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EACnC,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QACrC,IACE,CAAC,YAAY,CAAC,MAAM,EAAE,oBAAoB,CAAC;YAC3C,CAAC,CAAC,IAAI,KAAK,WAAW;YACtB,CAAC,CAAC,YAAY,KAAK,oBAAoB;YACvC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YACjC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAC3B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;YACf,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,IAAI,GAAG,CAAC;YACR,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI;YAE9C,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/packages/core/dist/revocation.d.ts

@@ -0,0 +1,58 @@
+import type { KeyPair, Signed } from './types.js';
+export interface RevocationNotice {
+    type: 'RevocationNotice';
+    revocationId: string;
+    issuerDid: string;
+    targetType: 'invite' | 'capability';
+    targetId: string;
+    reason: string;
+    revokedAt: string;
+}
+export type SignedRevocationNotice = Signed<RevocationNotice>;
+/** Structural view so callers can pass a registry built from another compilation of this package. */
+export interface RevocationList {
+    isRevoked(targetType: 'invite' | 'capability', targetId: string): boolean;
+    assertNotRevoked(targetType: 'invite' | 'capability', targetId: string): void;
+    /**
+     * Signature-checked notices for this target.
+     * A capability notice applies only when its issuer issued that token or an
+     * ancestor in the verified chain being evaluated. Another issuer's notice
+     * for the same target id must not revoke that chain.
+     */
+    noticesFor?(targetType: 'invite' | 'capability', targetId: string): SignedRevocationNotice[];
+    /**
+     * True when `isRevoked` is set by a source that cannot list notice issuers.
+     * A listed notice from a different issuer is not unexplained.
+     */
+    unexplainedRevocation?(targetType: 'invite' | 'capability', targetId: string): boolean;
+}
+/** Stable invite target id: JCS SHA-256 of the verified payload, including expired invites. */
+export declare function inviteRevocationId(token: string, options?: {
+    allowPrivateRelay?: boolean;
+}): string;
+export declare function createRevocationNotice(input: {
+    targetType: 'invite' | 'capability';
+    targetId: string;
+    reason: string;
+    revokedAt?: string;
+}, issuer: KeyPair): SignedRevocationNotice;
+/** Ed25519 over RFC 8785 JCS. A notice signed by someone other than issuerDid is rejected. */
+export declare function verifyRevocationNotice(notice: SignedRevocationNotice, expectedIssuer?: string): boolean;
+/**
+ * In-memory, serializable set of verified revocation notices.
+ * Invite lookup keys are derived from verified payloads and bound to their owner.
+ * Signed notices remain unchanged; imports rebuild the derived lookup keys.
+ * Capability notices are kept per issuer. A second issuer revoking the same
+ * target id must not replace the first: chain checks match the notice issuer
+ * to the verified token, and a colliding id is not a global kill switch.
+ */
+export declare class RevocationRegistry {
+    private readonly notices;
+    revoke(notice: SignedRevocationNotice, expectedIssuer?: string): void;
+    isRevoked(targetType: 'invite' | 'capability', targetId: string): boolean;
+    noticesFor(targetType: 'invite' | 'capability', targetId: string): SignedRevocationNotice[];
+    assertNotRevoked(targetType: 'invite' | 'capability', targetId: string): void;
+    exportNotices(): SignedRevocationNotice[];
+    importNotices(notices: SignedRevocationNotice[]): void;
+    private lookupKey;
+}

package/dist/packages/core/dist/revocation.js

@@ -0,0 +1,112 @@
+// SPDX-License-Identifier: Apache-2.0
+import { randomUUID } from 'node:crypto';
+import { digest, signPayload, verifySigned } from './crypto.js';
+import { parseAndVerifyInviteToken } from './discovery.js';
+function verifiedInvite(token, options = {}) {
+    const uri = /^[\w-]+$/.test(token) ? 'acp-invite:' + token : token;
+    return parseAndVerifyInviteToken(uri, Date.now(), { ...options, allowExpired: true });
+}
+/** Stable invite target id: JCS SHA-256 of the verified payload, including expired invites. */
+export function inviteRevocationId(token, options = {}) {
+    return digest(verifiedInvite(token, options));
+}
+function inviteTargetId(targetId, issuerDid) {
+    let invite;
+    try {
+        // Lookup is local and does not dial the invite's relay.
+        invite = verifiedInvite(targetId, { allowPrivateRelay: true });
+    }
+    catch {
+        // Opaque ids and unverifiable invite targets retain exact-string lookup.
+        return targetId;
+    }
+    if (issuerDid && invite.ownerDid !== issuerDid)
+        throw new Error('INVALID_REVOCATION_ISSUER');
+    return digest(invite);
+}
+export function createRevocationNotice(input, issuer) {
+    if (input.targetType !== 'invite' && input.targetType !== 'capability')
+        throw new Error('INVALID_REVOCATION');
+    if (!input.targetId || !input.reason)
+        throw new Error('INVALID_REVOCATION');
+    const revokedAt = input.revokedAt ?? new Date().toISOString();
+    if (!Number.isFinite(Date.parse(revokedAt)))
+        throw new Error('INVALID_REVOCATION');
+    return signPayload({
+        type: 'RevocationNotice',
+        revocationId: randomUUID(),
+        issuerDid: issuer.did,
+        targetType: input.targetType,
+        targetId: input.targetId,
+        reason: input.reason,
+        revokedAt,
+    }, issuer);
+}
+/** Ed25519 over RFC 8785 JCS. A notice signed by someone other than issuerDid is rejected. */
+export function verifyRevocationNotice(notice, expectedIssuer) {
+    try {
+        const payload = notice.payload;
+        return (verifySigned(notice, payload.issuerDid) &&
+            (!expectedIssuer || payload.issuerDid === expectedIssuer) &&
+            payload.type === 'RevocationNotice' &&
+            (payload.targetType === 'invite' || payload.targetType === 'capability') &&
+            typeof payload.revocationId === 'string' &&
+            payload.revocationId.length > 0 &&
+            typeof payload.targetId === 'string' &&
+            payload.targetId.length > 0 &&
+            typeof payload.reason === 'string' &&
+            payload.reason.length > 0 &&
+            Number.isFinite(Date.parse(payload.revokedAt)) &&
+            notice.signature.signerDid === payload.issuerDid);
+    }
+    catch {
+        return false;
+    }
+}
+function registryKey(targetType, targetId) {
+    return targetType + '\0' + targetId;
+}
+/**
+ * In-memory, serializable set of verified revocation notices.
+ * Invite lookup keys are derived from verified payloads and bound to their owner.
+ * Signed notices remain unchanged; imports rebuild the derived lookup keys.
+ * Capability notices are kept per issuer. A second issuer revoking the same
+ * target id must not replace the first: chain checks match the notice issuer
+ * to the verified token, and a colliding id is not a global kill switch.
+ */
+export class RevocationRegistry {
+    notices = new Map();
+    revoke(notice, expectedIssuer) {
+        if (!verifyRevocationNotice(notice, expectedIssuer))
+            throw new Error('INVALID_REVOCATION');
+        const { targetType, targetId, issuerDid } = notice.payload;
+        const key = registryKey(targetType, targetType === 'invite' ? inviteTargetId(targetId, issuerDid) : targetId);
+        const list = this.notices.get(key) ?? [];
+        const duplicate = list.some((existing) => existing.payload.issuerDid === notice.payload.issuerDid &&
+            existing.payload.revocationId === notice.payload.revocationId);
+        if (!duplicate)
+            list.push(structuredClone(notice));
+        this.notices.set(key, list);
+    }
+    isRevoked(targetType, targetId) {
+        return (this.notices.get(this.lookupKey(targetType, targetId))?.length ?? 0) > 0;
+    }
+    noticesFor(targetType, targetId) {
+        return (this.notices.get(this.lookupKey(targetType, targetId)) ?? []).map((notice) => structuredClone(notice));
+    }
+    assertNotRevoked(targetType, targetId) {
+        if (this.isRevoked(targetType, targetId))
+            throw new Error('TOKEN_REVOKED');
+    }
+    exportNotices() {
+        return [...this.notices.values()].flat().map((notice) => structuredClone(notice));
+    }
+    importNotices(notices) {
+        for (const notice of notices)
+            this.revoke(notice);
+    }
+    lookupKey(targetType, targetId) {
+        return registryKey(targetType, targetType === 'invite' ? inviteTargetId(targetId) : targetId);
+    }
+}
+//# sourceMappingURL=revocation.js.map

package/dist/packages/core/dist/revocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocation.js","sourceRoot":"","sources":["../src/revocation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAiC3D,SAAS,cAAc,CAAC,KAAa,EAAE,UAA2C,EAAE;IAClF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,UAA2C,EAAE;IAE7C,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,SAAkB;IAC1D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAKC,EACD,MAAe;IAEf,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY;QACpE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnF,OAAO,WAAW,CAChB;QACE,IAAI,EAAE,kBAAkB;QACxB,YAAY,EAAE,UAAU,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;KACV,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,cAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,OAAO,CACL,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC;YACvC,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC,SAAS,KAAK,cAAc,CAAC;YACzD,OAAO,CAAC,IAAI,KAAK,kBAAkB;YACnC,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,YAAY,CAAC;YACxE,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YACxC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC/B,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;YACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC3B,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CACjD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACvD,OAAO,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IACZ,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEvE,MAAM,CAAC,MAA8B,EAAE,cAAuB;QAC5D,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3F,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3D,MAAM,GAAG,GAAG,WAAW,CACrB,UAAU,EACV,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CACzE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS;YACvD,QAAQ,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,OAAO,CAAC,YAAY,CAChE,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,UAAmC,EAAE,QAAgB;QAC7D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,UAAU,CAAC,UAAmC,EAAE,QAAgB;QAC9D,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACnF,eAAe,CAAC,MAAM,CAAC,CACxB,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,UAAmC,EAAE,QAAgB;QACpE,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7E,CAAC;IAED,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,aAAa,CAAC,OAAiC;QAC7C,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAEO,SAAS,CAAC,UAAmC,EAAE,QAAgB;QACrE,OAAO,WAAW,CAAC,UAAU,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChG,CAAC;CACF"}

package/dist/packages/core/dist/schema.d.ts

@@ -0,0 +1,11 @@
+import { Ajv2020 } from 'ajv/dist/2020.js';
+import type { TaskManifest, Schema } from './types.js';
+export declare function createAjv(): Ajv2020;
+export declare const specDirectory: URL;
+export declare function loadSchema(name: string): Schema;
+/** Spec files are static. Rebuilding Ajv for every envelope check dominates a session. */
+export declare function schemaRegistry(): Ajv2020;
+export declare function validateSchema(name: string, value: unknown): void;
+export declare function validateManifest(value: unknown): asserts value is TaskManifest;
+export declare function assertSynchronousSchema(schema: unknown): void;
+export declare function validateOutput(schema: Schema, value: unknown): boolean;

package/dist/packages/core/dist/schema.js

@@ -0,0 +1,48 @@
+// SPDX-License-Identifier: Apache-2.0
+import { readFileSync, readdirSync } from 'node:fs';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+import formats from 'ajv-formats';
+export function createAjv() {
+    const ajv = new Ajv2020({ allErrors: true, strict: false, validateFormats: true });
+    formats(ajv);
+    return ajv;
+}
+export const specDirectory = new URL('../../../spec/', import.meta.url);
+export function loadSchema(name) {
+    if (!/^[a-z-]+$/.test(name))
+        throw new Error('INVALID_SCHEMA_NAME');
+    return JSON.parse(readFileSync(new URL(name + '.schema.json', specDirectory), 'utf8'));
+}
+let cachedRegistry;
+/** Spec files are static. Rebuilding Ajv for every envelope check dominates a session. */
+export function schemaRegistry() {
+    if (cachedRegistry)
+        return cachedRegistry;
+    const ajv = createAjv();
+    for (const f of readdirSync(specDirectory).filter((f) => f.endsWith('.schema.json')))
+        ajv.addSchema(loadSchema(f.slice(0, -12)), f.slice(0, -12));
+    cachedRegistry = ajv;
+    return ajv;
+}
+export function validateSchema(name, value) {
+    const ajv = schemaRegistry();
+    const validate = ajv.getSchema(name);
+    if (!validate(value))
+        throw new Error('SCHEMA_VIOLATION: ' + ajv.errorsText(validate.errors));
+}
+export function validateManifest(value) {
+    validateSchema('task-manifest', value);
+}
+export function assertSynchronousSchema(schema) {
+    if (!schema || typeof schema !== 'object')
+        return;
+    if (Object.hasOwn(schema, '$async'))
+        throw new Error('ASYNC_SCHEMA_FORBIDDEN');
+    for (const value of Object.values(schema))
+        assertSynchronousSchema(value);
+}
+export function validateOutput(schema, value) {
+    assertSynchronousSchema(schema);
+    return createAjv().compile(schema)(value) === true;
+}
+//# sourceMappingURL=schema.js.map

package/dist/packages/core/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,OAAO,MAAM,aAAa,CAAC;AAElC,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,OAA2C,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAW,CAAC;AACnG,CAAC;AACD,IAAI,cAAwD,CAAC;AAC7D,0FAA0F;AAC1F,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAClF,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,cAAc,GAAG,GAAG,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc;IACzD,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO;IAClD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAc;IAC3D,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/packages/core/dist/types.d.ts

@@ -0,0 +1,172 @@
+export type Json = null | boolean | number | string | Json[] | {
+    [key: string]: Json;
+};
+export type Schema = Record<string, unknown>;
+export interface KeyPair {
+    did: string;
+    privateKey: string;
+}
+export interface Signature {
+    signerDid: string;
+    canonicalization: 'RFC8785-JCS';
+    payloadDigest: string;
+    signedAt: string;
+    signature: string;
+}
+export interface Signed<T> {
+    payload: T;
+    signature: Signature;
+}
+export type Gate = 'contract_acceptance' | 'external_side_effect' | 'budget_increase' | 'redelegation' | 'final_verification';
+export interface Approval {
+    type: 'ApprovalReceipt';
+    receiptId: string;
+    taskId: string;
+    gate: Gate;
+    targetDigest: string;
+    decision: 'APPROVED' | 'REJECTED';
+    approvedAt: string;
+}
+export type ApprovalReceipt = Signed<Approval>;
+export interface Usage {
+    type: 'UsageReceipt';
+    taskId: string;
+    inputTokens: number;
+    outputTokens: number;
+    totalTokens: number;
+    toolCalls: number;
+    wallTimeMs: number;
+    halted: boolean;
+}
+export type UsageReceipt = Signed<Usage>;
+export interface Ack {
+    type: 'AckReceipt';
+    taskId: string;
+    entryHash: string;
+    actorDid: string;
+    receiverDid: string;
+}
+export type AckReceipt = Signed<Ack>;
+/** Ciphertext wrapper stored in `envelope.payload.payload`. The relay never receives the plaintext. */
+export type EncryptedEnvelopePayload = {
+    __acpEncrypted: 'X25519-HKDF-AES256GCM';
+    /** Ephemeral X25519 SPKI DER, or the raw 32-byte public key, base64url. */
+    ephemeralPublicKey: string;
+    /**
+     * 12-byte AES-GCM nonce, base64url. Also the HKDF salt.
+     * HKDF info binds the canonical header plus the ephemeral and recipient X25519 public keys.
+     */
+    iv: string;
+    ciphertext: string;
+    /** 16-byte AES-GCM tag, base64url. */
+    tag: string;
+};
+export interface Envelope {
+    type: 'SignedEnvelope';
+    envelopeId: string;
+    taskId: string;
+    seq: number;
+    eventType: string;
+    senderDid: string;
+    recipientDid: string;
+    payload: Json;
+}
+export type SignedEnvelope = Signed<Envelope>;
+export interface Capability {
+    type: 'CapabilityToken';
+    id: string;
+    issuer: string;
+    audience: string;
+    taskId: string;
+    resource: string;
+    allowedTools: string[];
+    argConstraints: Record<string, Schema>;
+    maxCalls: number;
+    notBefore: string;
+    expiresAt: string;
+    maxDepth: number;
+    parentHash: string | null;
+}
+export type CapabilityToken = Signed<Capability>;
+export interface BudgetSpec {
+    costBearer: 'worker_byok' | 'bilateral_quota' | 'external_settlement_plugin';
+    maxInputTokens: number;
+    maxOutputTokens: number;
+    maxToolInvocations: number;
+    maxWallClockSeconds: number;
+    onOverrun: 'hard_stop' | 'request_hitl_amendment';
+}
+export interface TaskManifest {
+    protocolVersion: string;
+    taskId: string;
+    createdAt: string;
+    deadline: string;
+    requester: {
+        ownerDid: string;
+        agentDid: string;
+        displayName?: string;
+        relayEndpoint?: string;
+    };
+    worker?: {
+        ownerDid: string;
+        agentDid: string;
+        displayName?: string;
+        relayEndpoint?: string;
+    };
+    task: {
+        skillId?: string;
+        taskType?: string;
+        title: string;
+        description: string;
+        acceptanceCriteria: {
+            id: string;
+            description: string;
+            required: boolean;
+        }[];
+    };
+    io: {
+        inputSchema: Schema;
+        outputSchema: Schema;
+        inputArtifacts?: {
+            name: string;
+            digest: string;
+            mediaType: string;
+            sizeBytes: number;
+        }[];
+    };
+    verification: {
+        mode: string;
+        requireUsageReceipt: boolean;
+        requireExecutionAttestation: boolean;
+        maxRetries: number;
+        checks?: {
+            checkId: string;
+            kind: string;
+            target: string;
+            expectedExitCode?: number;
+        }[];
+    };
+    budget: BudgetSpec;
+    permissions: {
+        maxDelegationDepth: number;
+        grantedCapabilities: {
+            capabilityId: string;
+            resource: string;
+            allowedTools: string[];
+            argConstraints?: Schema;
+            maxInvocations: number;
+            expiresAt: string;
+        }[];
+    };
+    sandboxPolicy: {
+        isolationLevel: string;
+        networkAccess: string;
+        filesystemScope: string;
+        allowedHosts?: string[];
+        allowSubprocessFallback?: boolean;
+    };
+    hitlPolicy: {
+        requiredGates: string[];
+    };
+    signatures?: Record<string, Signature>;
+}

package/dist/packages/core/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/packages/core/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}