sealbridge 0.0.1 → 0.2.0

package/dist/packages/adapters/dist/sandbox.d.ts

@@ -0,0 +1,45 @@
+import type { AgentAdapter, AgentTaskContext } from '@acp/runtime';
+import type { Json } from '@acp/core';
+/**
+ * Runs task JavaScript and reports the isolation the host runner actually used.
+ *
+ * `subprocess_restricted` (the default, and the fallback when Podman or Docker
+ * is absent) is a separate OS process. The child gets a sanitized environment
+ * (no inherited credentials or `NODE_OPTIONS`), a temporary scratch directory,
+ * a wall-clock timeout followed by SIGTERM then SIGKILL, and an output byte cap.
+ * `detectNodePermissionFlag` / `resolveNodePermissionArgs` in `@acp/sandbox`
+ * select `--permission` on Node.js >= 22.13 and on Node.js 23+, or
+ * `--experimental-permission` on earlier Node.js 20 and 22 releases, and pair
+ * that flag with `--allow-fs-read` and `--allow-fs-write` for the scratch
+ * directory. Those flags restrict filesystem, child-process, worker-thread, and
+ * native-addon access. They do not block `fetch`, `node:net`, `node:http`,
+ * `node:https`, `node:dns`, or `node:dgram`, and they are not a kernel network
+ * namespace. When this Node binary advertises neither flag, the child still
+ * starts and `sandboxBoundary.permissionModelActive` is false.
+ *
+ * Task source is evaluated with `node:vm` in that same child. Node.js documents
+ * that `node:vm` is not a security mechanism against untrusted code. A
+ * null-prototype context that omits `process` and `require`, and deleting
+ * `globalThis.fetch` and `WebSocket` in the wrapper, only shrinks the API the
+ * guest script sees.
+ *
+ * Untrusted third-party code requires `oci_container`
+ * (`isolationLevel: 'oci_container'`). That path runs Podman or Docker with
+ * `--network none`, a read-only root filesystem, `--cap-drop ALL`,
+ * `--security-opt no-new-privileges`, and PID and memory limits.
+ * `ExecutionAttestation.effectiveIsolationLevel` is `subprocess_restricted` or
+ * `oci_container` from the path that ran. `VerificationEngine` rejects a
+ * `subprocess_restricted` attestation when the contract requires `oci_container`,
+ * unless `sandboxPolicy.allowSubprocessFallback` is true.
+ */
+export declare class SandboxAgentAdapter implements AgentAdapter {
+    readonly code: string;
+    readonly id = "sandbox";
+    readonly name = "Restricted JavaScript Worker";
+    readonly skills: {
+        id: string;
+        name: string;
+    }[];
+    constructor(code?: string);
+    executeTask(context: AgentTaskContext): Promise<Json>;
+}

package/dist/packages/adapters/dist/sandbox.js

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: Apache-2.0
+import { runContainerOrSubprocessSandbox } from '../../sandbox/dist/index.js';
+/**
+ * Runs task JavaScript and reports the isolation the host runner actually used.
+ *
+ * `subprocess_restricted` (the default, and the fallback when Podman or Docker
+ * is absent) is a separate OS process. The child gets a sanitized environment
+ * (no inherited credentials or `NODE_OPTIONS`), a temporary scratch directory,
+ * a wall-clock timeout followed by SIGTERM then SIGKILL, and an output byte cap.
+ * `detectNodePermissionFlag` / `resolveNodePermissionArgs` in `@acp/sandbox`
+ * select `--permission` on Node.js >= 22.13 and on Node.js 23+, or
+ * `--experimental-permission` on earlier Node.js 20 and 22 releases, and pair
+ * that flag with `--allow-fs-read` and `--allow-fs-write` for the scratch
+ * directory. Those flags restrict filesystem, child-process, worker-thread, and
+ * native-addon access. They do not block `fetch`, `node:net`, `node:http`,
+ * `node:https`, `node:dns`, or `node:dgram`, and they are not a kernel network
+ * namespace. When this Node binary advertises neither flag, the child still
+ * starts and `sandboxBoundary.permissionModelActive` is false.
+ *
+ * Task source is evaluated with `node:vm` in that same child. Node.js documents
+ * that `node:vm` is not a security mechanism against untrusted code. A
+ * null-prototype context that omits `process` and `require`, and deleting
+ * `globalThis.fetch` and `WebSocket` in the wrapper, only shrinks the API the
+ * guest script sees.
+ *
+ * Untrusted third-party code requires `oci_container`
+ * (`isolationLevel: 'oci_container'`). That path runs Podman or Docker with
+ * `--network none`, a read-only root filesystem, `--cap-drop ALL`,
+ * `--security-opt no-new-privileges`, and PID and memory limits.
+ * `ExecutionAttestation.effectiveIsolationLevel` is `subprocess_restricted` or
+ * `oci_container` from the path that ran. `VerificationEngine` rejects a
+ * `subprocess_restricted` attestation when the contract requires `oci_container`,
+ * unless `sandboxPolicy.allowSubprocessFallback` is true.
+ */
+export class SandboxAgentAdapter {
+    code;
+    id = 'sandbox';
+    name = 'Restricted JavaScript Worker';
+    skills = [{ id: 'json-task', name: 'JSON task' }];
+    constructor(code = 'return input;') {
+        this.code = code;
+    }
+    async executeTask(context) {
+        const policy = context.manifest.sandboxPolicy;
+        if (policy.networkAccess !== 'none' || policy.filesystemScope !== 'ephemeral_workspace_only')
+            throw new Error('UNSUPPORTED_SANDBOX_POLICY');
+        const result = await runContainerOrSubprocessSandbox({
+            code: this.code,
+            input: context.input,
+            isolationLevel: policy.isolationLevel,
+            timeoutMs: context.manifest.budget.maxWallClockSeconds * 1000,
+            signal: context.signal,
+            onTool: (name, args) => context.callTool(name, args),
+            onUsage: (inputTokens, outputTokens) => context.reportUsage({ inputTokens, outputTokens }),
+        });
+        context.reportIsolation?.(result.effectiveIsolationLevel, result.sandboxBoundary);
+        return result.output;
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/packages/adapters/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAI/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,mBAAmB;IAIT;IAHZ,EAAE,GAAG,SAAS,CAAC;IACf,IAAI,GAAG,8BAA8B,CAAC;IACtC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,YAAqB,OAAO,eAAe;QAAtB,SAAI,GAAJ,IAAI,CAAkB;IAAG,CAAC;IAC/C,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9C,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,0BAA0B;YAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI;YAC7D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAY,CAAC;YAC5D,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;SAC3F,CAAC,CAAC;QACH,OAAO,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/packages/core/dist/capability.d.ts

@@ -0,0 +1,36 @@
+import type { RevocationList } from './revocation.js';
+import type { Capability, CapabilityToken, KeyPair, Schema } from './types.js';
+export declare function violation(detail: string): never;
+export declare function resourceWithin(child: string, parent: string): boolean;
+export declare function schemaNarrows(child: Schema, parent: Schema): boolean;
+export declare function assertAttenuation(parent: CapabilityToken, child: CapabilityToken): void;
+export declare function createCapability(params: Omit<Capability, 'type' | 'id' | 'issuer' | 'parentHash'>, key: KeyPair, parent?: CapabilityToken): CapabilityToken;
+export interface CapabilityContext {
+    rootDid: string;
+    audience: string;
+    taskId: string;
+    now?: number;
+}
+export declare function verifyCapabilityChain(chain: CapabilityToken[], context: CapabilityContext): CapabilityToken;
+/**
+ * True when `issuerDid` signed this token or an ancestor in the chain.
+ * `payload.issuer` is ignored unless that token's signature verifies for the
+ * same DID. Callers must pass a chain that has already passed
+ * `verifyCapabilityChain` for the context being evaluated: a self-signed
+ * token controls only itself, not another issuer's token that reused its id.
+ */
+export declare function capabilityIssuerControls(chain: CapabilityToken[], index: number, issuerDid: string): boolean;
+export declare class CapabilityGuard {
+    private readonly registry?;
+    private counts;
+    private revoked;
+    constructor(registry?: RevocationList | undefined);
+    revokeTask(taskId: string): void;
+    authorize(chain: CapabilityToken[], context: CapabilityContext, tool: string, args: Record<string, unknown>, resource: string): void;
+    /**
+     * A notice revokes this token only when its issuer controls the token in
+     * this verified chain. A third party who minted a different token with the
+     * same id does not.
+     */
+    private capabilityTargetRevoked;
+}

package/dist/packages/core/dist/capability.js

@@ -0,0 +1,203 @@
+// SPDX-License-Identifier: Apache-2.0 AND MIT
+// Adapted from newtro/delegateos src/core/dct.ts and chain.ts (MIT), Scott Smith.
+import { randomUUID } from 'node:crypto';
+import { canonicalize, digest, signPayload, verifySigned } from './crypto.js';
+import { DEFAULT_CLOCK_SKEW_MS } from './discovery.js';
+import { validateSchema, createAjv, assertSynchronousSchema } from './schema.js';
+export function violation(detail) {
+    throw new Error('CAPABILITY_VIOLATION: ' + detail);
+}
+// Only exact URIs and terminal /* prefixes are supported. No glob inference.
+export function resourceWithin(child, parent) {
+    if (child === parent)
+        return true;
+    if (!parent.endsWith('/*'))
+        return false;
+    const prefix = parent.slice(0, -1);
+    return (child.startsWith(prefix) &&
+        !child.slice(prefix.length).includes('..') &&
+        !/%2e|%2f|%5c/i.test(child) &&
+        !child.includes('\\'));
+}
+// General JSON Schema containment is undecidable. Accept identical schemas or
+// explicit allOf inheritance only; reject all other rewrites, including equivalent ones.
+function assertToolSchema(schema) {
+    assertSynchronousSchema(schema);
+    const check = (s) => {
+        if (!s || typeof s !== 'object')
+            return;
+        for (const [k, v] of Object.entries(s)) {
+            if (['$ref', '$dynamicRef', '$id', '$anchor', '$dynamicAnchor'].includes(k))
+                violation('tool schemas must be self-contained');
+            check(v);
+        }
+    };
+    check(schema);
+    createAjv().compile(schema);
+}
+export function schemaNarrows(child, parent) {
+    if (canonicalize(child) === canonicalize(parent))
+        return true;
+    return (Array.isArray(child.allOf) &&
+        child.allOf.some((s) => canonicalize(s) === canonicalize(parent)));
+}
+export function assertAttenuation(parent, child) {
+    const p = parent.payload, c = child.payload;
+    if (c.parentHash !== digest(parent) ||
+        p.audience !== c.issuer ||
+        p.taskId !== c.taskId ||
+        c.maxDepth > p.maxDepth - 1 ||
+        c.maxCalls > p.maxCalls ||
+        Date.parse(c.expiresAt) > Date.parse(p.expiresAt) ||
+        Date.parse(c.notBefore) < Date.parse(p.notBefore) ||
+        !resourceWithin(c.resource, p.resource))
+        violation('non-monotonic delegation');
+    for (const tool of c.allowedTools)
+        if (!p.allowedTools.includes(tool) ||
+            !c.argConstraints[tool] ||
+            !p.argConstraints[tool] ||
+            !schemaNarrows(c.argConstraints[tool], p.argConstraints[tool]))
+            violation('tool or argument schema escalation');
+}
+export function createCapability(params, key, parent) {
+    const token = signPayload({
+        ...params,
+        type: 'CapabilityToken',
+        id: randomUUID(),
+        issuer: key.did,
+        parentHash: parent ? digest(parent) : null,
+    }, key);
+    validateSchema('capability-token', token);
+    for (const tool of token.payload.allowedTools)
+        if (!token.payload.argConstraints[tool] ||
+            !createAjv().validateSchema(token.payload.argConstraints[tool]))
+            violation('missing or invalid tool schema');
+    for (const tool of token.payload.allowedTools)
+        assertToolSchema(token.payload.argConstraints[tool]);
+    if (parent)
+        assertAttenuation(parent, token);
+    return token;
+}
+export function verifyCapabilityChain(chain, context) {
+    if (!chain.length || chain.length > 32)
+        violation('invalid proof chain length');
+    for (let i = 0; i < chain.length; i++) {
+        const t = chain[i], p = t.payload;
+        try {
+            validateSchema('capability-token', t);
+        }
+        catch {
+            violation('malformed token');
+        }
+        if (!verifySigned(t, p.issuer) ||
+            p.taskId !== context.taskId ||
+            (context.now ?? Date.now()) + DEFAULT_CLOCK_SKEW_MS < Date.parse(p.notBefore) ||
+            (context.now ?? Date.now()) >= Date.parse(p.expiresAt) ||
+            Date.parse(p.notBefore) >= Date.parse(p.expiresAt))
+            violation('signature, task or time');
+        for (const name of p.allowedTools)
+            if (!p.argConstraints[name] || !createAjv().validateSchema(p.argConstraints[name]))
+                violation('invalid tool schema');
+        for (const tool of p.allowedTools)
+            assertToolSchema(p.argConstraints[tool]);
+        if (i === 0) {
+            if (p.issuer !== context.rootDid || p.parentHash !== null)
+                violation('untrusted root');
+        }
+        else
+            assertAttenuation(chain[i - 1], t);
+    }
+    const leaf = chain[chain.length - 1];
+    if (leaf.payload.audience !== context.audience)
+        violation('audience');
+    return leaf;
+}
+/**
+ * True when `issuerDid` signed this token or an ancestor in the chain.
+ * `payload.issuer` is ignored unless that token's signature verifies for the
+ * same DID. Callers must pass a chain that has already passed
+ * `verifyCapabilityChain` for the context being evaluated: a self-signed
+ * token controls only itself, not another issuer's token that reused its id.
+ */
+export function capabilityIssuerControls(chain, index, issuerDid) {
+    if (!issuerDid)
+        return false;
+    for (let i = 0; i <= index && i < chain.length; i++) {
+        const token = chain[i];
+        if (!token?.payload || token.payload.issuer !== issuerDid)
+            continue;
+        if (!verifySigned(token, issuerDid))
+            continue;
+        return true;
+    }
+    return false;
+}
+function capabilityIdentity(token) {
+    return digest({ issuer: token.payload.issuer, id: token.payload.id });
+}
+export class CapabilityGuard {
+    registry;
+    counts = new Map();
+    revoked = new Set();
+    constructor(registry) {
+        this.registry = registry;
+    }
+    revokeTask(taskId) {
+        this.revoked.add(taskId);
+    }
+    authorize(chain, context, tool, args, resource) {
+        // Task revocation does not read the chain. Check it before maxCalls so a
+        // settled task still fails closed after its counters are exhausted.
+        if (this.revoked.has(context.taskId))
+            violation('revoked task');
+        // Verify before trusting payload.issuer or treating a shared token id as revoked.
+        const leaf = verifyCapabilityChain(chain, context);
+        if (this.registry) {
+            for (let index = 0; index < chain.length; index++) {
+                const token = chain[index];
+                // The signed id is stable across representations. Digest targets remain
+                // supported after verification has required canonical signature encoding.
+                if (this.capabilityTargetRevoked(chain, index, token.payload.id) ||
+                    this.capabilityTargetRevoked(chain, index, digest(token)))
+                    throw new Error('TOKEN_REVOKED');
+            }
+        }
+        if (!leaf.payload.allowedTools.includes(tool) ||
+            !resourceWithin(resource, leaf.payload.resource) ||
+            !createAjv().compile(leaf.payload.argConstraints[tool])(args))
+            violation('tool, scope or arguments');
+        // Reserve synchronously before any asynchronous tool side effect. Parent IDs
+        // share counters across siblings; a caller must reuse this owner-side guard.
+        for (const t of chain)
+            if ((this.counts.get(capabilityIdentity(t)) ?? 0) >= t.payload.maxCalls)
+                violation('maxCalls exhausted');
+        for (const t of chain) {
+            const id = capabilityIdentity(t);
+            this.counts.set(id, (this.counts.get(id) ?? 0) + 1);
+        }
+    }
+    /**
+     * A notice revokes this token only when its issuer controls the token in
+     * this verified chain. A third party who minted a different token with the
+     * same id does not.
+     */
+    capabilityTargetRevoked(chain, index, targetId) {
+        const registry = this.registry;
+        if (!registry || !targetId)
+            return false;
+        const source = registry;
+        if (typeof source.noticesFor !== 'function')
+            return registry.isRevoked('capability', targetId);
+        const notices = source.noticesFor('capability', targetId);
+        if (notices.some((notice) => capabilityIssuerControls(chain, index, notice.payload.issuerDid)))
+            return true;
+        if (typeof source.unexplainedRevocation === 'function')
+            return source.unexplainedRevocation('capability', targetId);
+        // Listed notices are authoritative. An empty list plus a bare bit is an
+        // opaque registry that cannot show the issuer.
+        if (notices.length > 0)
+            return false;
+        return registry.isRevoked('capability', targetId);
+    }
+}
+//# sourceMappingURL=capability.js.map

package/dist/packages/core/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,kFAAkF;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAGjF,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,MAAM,CAAC,CAAC;AACrD,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc;IAC1D,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACxB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1C,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC;AACD,8EAA8E;AAC9E,yFAAyF;AACzF,SAAS,gBAAgB,CAAC,MAAc;IACtC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAQ,EAAE;QACjC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzE,SAAS,CAAC,qCAAqC,CAAC,CAAC;YACnD,KAAK,CAAC,CAAC,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,CAAC;IACd,SAAS,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,MAAc;IACzD,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,MAAuB,EAAE,KAAsB;IAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,EACtB,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;IACpB,IACE,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM;QACvB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QACrB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC;QAC3B,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ;QACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC;QAEvC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,YAAY;QAC/B,IACE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9B,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;YACvB,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE9D,SAAS,CAAC,oCAAoC,CAAC,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,gBAAgB,CAC9B,MAAiE,EACjE,GAAY,EACZ,MAAwB;IAExB,MAAM,KAAK,GAAG,WAAW,CACvB;QACE,GAAG,MAAM;QACT,IAAI,EAAE,iBAA0B;QAChC,EAAE,EAAE,UAAU,EAAE;QAChB,MAAM,EAAE,GAAG,CAAC,GAAG;QACf,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3C,EACD,GAAG,CACJ,CAAC;IACF,cAAc,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY;QAC3C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC;YACnC,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE/D,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY;QAC3C,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM;QAAE,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,OAA0B;IAE1B,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAChF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAChB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAChB,IAAI,CAAC;YACH,cAAc,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC/B,CAAC;QACD,IACE,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAC3B,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAElD,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,YAAY;YAC/B,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAChF,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,YAAY;YAAE,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;gBAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACzF,CAAC;;YAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAwB,EACxB,KAAa,EACb,SAAiB;IAEjB,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS;QACpE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,SAAS;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAKD,SAAS,kBAAkB,CAAC,KAAsB;IAChD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,OAAO,eAAe;IAGG;IAFrB,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAC1D,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,SAAS,CACP,KAAwB,EACxB,OAA0B,EAC1B,IAAY,EACZ,IAA6B,EAC7B,QAAgB;QAEhB,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QAChE,kFAAkF;QAClF,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;gBAC5B,wEAAwE;gBACxE,0EAA0E;gBAC1E,IACE,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5D,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBAEzD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,IACE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzC,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChD,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAE7D,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACxC,6EAA6E;QAC7E,6EAA6E;QAC7E,KAAK,MAAM,CAAC,IAAI,KAAK;YACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ;gBACrE,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD;;;;OAIG;IACK,uBAAuB,CAC7B,KAAwB,EACxB,KAAa,EACb,QAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,MAAM,GAAG,QAAwB,CAAC;QACxC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC;QACd,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,UAAU;YACpD,OAAO,MAAM,CAAC,qBAAqB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC9D,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/packages/core/dist/contract.d.ts

@@ -0,0 +1,33 @@
+import type { KeyPair, Signed, TaskManifest } from './types.js';
+export interface TaskContract {
+    manifest: TaskManifest;
+    proposal: Signed<TaskManifest>;
+    acceptance: Signed<{
+        type: 'ACCEPT';
+        manifestDigest: string;
+        taskId: string;
+    }>;
+    contractDigest: string;
+}
+export declare function createContract(manifest: TaskManifest, proposal: Signed<TaskManifest>, worker: KeyPair): TaskContract;
+export declare function verifyContract(c: TaskContract): boolean;
+export type State = 'PROPOSED' | 'ACCEPTED' | 'IN_PROGRESS' | 'DELIVERED' | 'VERIFY_ACCEPT' | 'VERIFY_REJECT' | 'SETTLED' | 'CANCELLED' | 'DISPUTED';
+export type ContractEvent = 'ACCEPT' | 'START' | 'DELIVER' | 'VERIFY_ACCEPT' | 'VERIFY_REJECT' | 'SETTLE' | 'CANCEL' | 'DISPUTE';
+export declare const transitions: Partial<Record<State, Partial<Record<ContractEvent, State>>>>;
+export declare function nextState(state: State, event: ContractEvent): State;
+export interface Transition {
+    taskId: string;
+    contractDigest: string;
+    seq: number;
+    from: State;
+    event: ContractEvent;
+}
+export declare class ContractMachine {
+    #private;
+    readonly contract: TaskContract;
+    readonly history: Signed<Transition>[];
+    get state(): State;
+    constructor(contract: TaskContract);
+    event(event: ContractEvent, key: KeyPair): Signed<Transition>;
+    apply(signed: Signed<Transition>): State;
+}

package/dist/packages/core/dist/contract.js

@@ -0,0 +1,97 @@
+// SPDX-License-Identifier: Apache-2.0 AND MIT
+// Adapted from newtro/delegateos src/core/contract.ts (MIT), Scott Smith.
+import { digest, signPayload, verifySigned } from './crypto.js';
+import { validateManifest } from './schema.js';
+export function createContract(manifest, proposal, worker) {
+    validateManifest(manifest);
+    if (!manifest.worker ||
+        worker.did !== manifest.worker.ownerDid ||
+        digest(manifest) !== digest(proposal.payload) ||
+        !verifySigned(proposal, manifest.requester.ownerDid))
+        throw new Error('INVALID_CONTRACT');
+    const acceptance = signPayload({ type: 'ACCEPT', manifestDigest: digest(manifest), taskId: manifest.taskId }, worker);
+    return {
+        manifest: structuredClone(manifest),
+        proposal,
+        acceptance,
+        contractDigest: digest({ proposal, acceptance }),
+    };
+}
+export function verifyContract(c) {
+    try {
+        validateManifest(c.manifest);
+        return (!!c.manifest.worker &&
+            digest(c.manifest) === digest(c.proposal.payload) &&
+            verifySigned(c.proposal, c.manifest.requester.ownerDid) &&
+            verifySigned(c.acceptance, c.manifest.worker.ownerDid) &&
+            c.acceptance.payload.type === 'ACCEPT' &&
+            c.acceptance.payload.taskId === c.manifest.taskId &&
+            c.acceptance.payload.manifestDigest === digest(c.manifest) &&
+            c.contractDigest === digest({ proposal: c.proposal, acceptance: c.acceptance }));
+    }
+    catch {
+        return false;
+    }
+}
+export const transitions = {
+    PROPOSED: { ACCEPT: 'ACCEPTED', CANCEL: 'CANCELLED' },
+    ACCEPTED: { START: 'IN_PROGRESS', CANCEL: 'CANCELLED' },
+    IN_PROGRESS: { DELIVER: 'DELIVERED', CANCEL: 'CANCELLED' },
+    DELIVERED: {
+        VERIFY_ACCEPT: 'VERIFY_ACCEPT',
+        VERIFY_REJECT: 'VERIFY_REJECT',
+        DISPUTE: 'DISPUTED',
+    },
+    VERIFY_ACCEPT: { SETTLE: 'SETTLED' },
+    VERIFY_REJECT: { DISPUTE: 'DISPUTED', CANCEL: 'CANCELLED' },
+    DISPUTED: { SETTLE: 'SETTLED' },
+};
+export function nextState(state, event) {
+    const next = transitions[state]?.[event];
+    if (!next)
+        throw new Error('INVALID_STATE_TRANSITION');
+    return next;
+}
+export class ContractMachine {
+    contract;
+    #state = 'PROPOSED';
+    #seq = 0;
+    history = [];
+    get state() {
+        return this.#state;
+    }
+    constructor(contract) {
+        this.contract = contract;
+        if (!verifyContract(contract))
+            throw new Error('INVALID_CONTRACT');
+    }
+    event(event, key) {
+        return signPayload({
+            taskId: this.contract.manifest.taskId,
+            contractDigest: this.contract.contractDigest,
+            seq: this.#seq,
+            from: this.#state,
+            event,
+        }, key);
+    }
+    apply(signed) {
+        const p = signed.payload, m = this.contract.manifest;
+        const workerEvents = ['ACCEPT', 'START', 'DELIVER'];
+        const expected = workerEvents.includes(p.event) ? m.worker.ownerDid : m.requester.ownerDid;
+        const either = ['CANCEL', 'DISPUTE'].includes(p.event);
+        if (!verifySigned(signed) ||
+            (!either && signed.signature.signerDid !== expected) ||
+            (either &&
+                ![m.requester.ownerDid, m.worker.ownerDid].includes(signed.signature.signerDid)) ||
+            p.taskId !== m.taskId ||
+            p.contractDigest !== this.contract.contractDigest ||
+            p.seq !== this.#seq ||
+            p.from !== this.#state)
+            throw new Error('INVALID_TRANSITION_SIGNATURE');
+        this.#state = nextState(this.#state, p.event);
+        this.#seq++;
+        this.history.push(structuredClone(signed));
+        return this.#state;
+    }
+}
+//# sourceMappingURL=contract.js.map

package/dist/packages/core/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,0EAA0E;AAC1E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAQ/C,MAAM,UAAU,cAAc,CAC5B,QAAsB,EACtB,QAA8B,EAC9B,MAAe;IAEf,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,IACE,CAAC,QAAQ,CAAC,MAAM;QAChB,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,CAAC,QAAQ;QACvC,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7C,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;QAEpD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,WAAW,CAC5B,EAAE,IAAI,EAAE,QAAiB,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EACtF,MAAM,CACP,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,QAAQ;QACR,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,IAAI,CAAC;QACH,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,CACL,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YACjD,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;YACvD,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;YACtC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM;YACjD,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1D,CAAC,CAAC,cAAc,KAAK,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAChF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAoBD,MAAM,CAAC,MAAM,WAAW,GAAkE;IACxF,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE;IACrD,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE;IACvD,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE;IAC1D,SAAS,EAAE;QACT,aAAa,EAAE,eAAe;QAC9B,aAAa,EAAE,eAAe;QAC9B,OAAO,EAAE,UAAU;KACpB;IACD,aAAa,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;IACpC,aAAa,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE;IAC3D,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;CAChC,CAAC;AACF,MAAM,UAAU,SAAS,CAAC,KAAY,EAAE,KAAoB;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD,MAAM,OAAO,eAAe;IAOL;IANrB,MAAM,GAAU,UAAU,CAAC;IAC3B,IAAI,GAAG,CAAC,CAAC;IACA,OAAO,GAAyB,EAAE,CAAC;IAC5C,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,YAAqB,QAAsB;QAAtB,aAAQ,GAAR,QAAQ,CAAc;QACzC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,KAAoB,EAAE,GAAY;QACtC,OAAO,WAAW,CAChB;YACE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YACrC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,GAAG,EAAE,IAAI,CAAC,IAAI;YACd,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,KAAK;SACN,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAA0B;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,EACtB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC5F,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,IACE,CAAC,YAAY,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC;YACpD,CAAC,MAAM;gBACL,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnF,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YACrB,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc;YACjD,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI;YACnB,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;YAEtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/packages/core/dist/crypto.d.ts

@@ -0,0 +1,34 @@
+import type { KeyObject } from 'node:crypto';
+import type { EncryptedEnvelopePayload, Json, KeyPair, Signature, Signed, SignedEnvelope } from './types.js';
+export declare function canonicalize(v: unknown): string;
+export declare function digestBytes(v: string | Uint8Array): string;
+export declare function digest(v: unknown): string;
+export declare function generateKeyPair(): KeyPair;
+export declare function resolveDid(did: string): KeyObject;
+export declare function signPayload<T>(payload: T, key: KeyPair, signedAt?: string): Signed<T>;
+export declare function verifySigned<T>(value: Signed<T>, expectedDid?: string): boolean;
+export declare function verifySignature(payload: unknown, signature: Signature, expectedDid?: string): boolean;
+export interface EnvelopeHeaderContext {
+    taskId: string;
+    seq: number;
+    eventType: string;
+    senderDid: string;
+    recipientDid: string;
+}
+/**
+ * HKDF-SHA256 info for envelope payload encryption.
+ * Binds the canonical header to the ephemeral X25519 public key and the
+ * recipient static X25519 public key so the AES key is tied to this
+ * Diffie-Hellman transcript as well as the header. Both keys are the raw
+ * 32-byte values, encoded base64url. AES-GCM additional data stays the
+ * header alone, and the 12-byte nonce stays the HKDF salt.
+ */
+export declare function envelopeHkdfInfo(context: EnvelopeHeaderContext, ephemeralPublicKey: Uint8Array, recipientPublicKey: Uint8Array): Buffer;
+export declare function isEncryptedEnvelopePayload(payload: unknown): payload is EncryptedEnvelopePayload;
+export declare function encryptEnvelopePayload(payload: Json, context: EnvelopeHeaderContext): EncryptedEnvelopePayload;
+export declare function decryptEnvelopePayload<T = Json>(payload: Json, recipient: KeyPair, context: EnvelopeHeaderContext, options?: {
+    requireEncrypted?: boolean;
+}): T;
+export declare function openEnvelope<T = Json>(envelope: SignedEnvelope, recipient: KeyPair, options?: {
+    requireEncrypted?: boolean;
+}): T;