sealbridge 0.4.2 → 0.6.0

package/dist/packages/core/dist/content-inspection.js

@@ -0,0 +1,192 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest } from './crypto.js';
+import { validateManifest } from './schema.js';
+import { CONTENT_INSPECTION_LIMITS, CONTENT_INSPECTION_RULES, CONTENT_INSPECTION_RULESET_DIGEST, CONTENT_INSPECTION_RULESET_VERSION } from './content-inspection-rules.js';
+const pointer = (segment) => segment.replace(/~/gu, '~0').replace(/\//gu, '~1');
+// Ordinary pointer keys locate content; keys containing potential evidence use a fixed marker.
+function pathSegment(key) {
+    const redact = key.length > 80 || /[\p{C}]|[a-z][a-z0-9+.-]*:|api.?key|token|password|secret|\.env|\.ssh|id_rsa|パスワード|トークン|秘密/iu.test(key) ||
+        CONTENT_INSPECTION_RULES.some(rule => rule.pattern && new RegExp(rule.pattern, rule.flags).test(key));
+    return pointer(redact ? '[redacted]' : key);
+}
+function binaryMagic(bytes) {
+    const hex = bytes.subarray(0, 8).toString('hex');
+    return ['4d5a', '7f454c46', 'cafebabe', 'cefaedfe', 'cffaedfe', 'feedface', 'feedfacf',
+        '504b0304', '504b0506', '504b0708', '1f8b', '377abcaf271c', '526172211a07', '425a68', 'fd377a585a00', '0061736d']
+        .some(magic => hex.startsWith(magic)) || bytes.subarray(257, 262).toString('ascii') === 'ustar';
+}
+/** Offline heuristic inspection. Limits are local and may only be lowered. Content is never executed. */
+export async function inspectRuleContent(content, options = {}, signal) {
+    const limits = { ...CONTENT_INSPECTION_LIMITS };
+    const findings = [];
+    let sizeBytes = 0, nodes = 0, decodedBytes = 0;
+    let contentDigest = digest(null);
+    let failure;
+    const stop = (code) => { throw code; };
+    const checkAbort = () => { if (signal?.aborted)
+        stop('ABORTED'); };
+    const addBytes = (bytes) => { sizeBytes += bytes; if (sizeBytes > limits.maxBytes)
+        stop('LIMIT_EXCEEDED'); };
+    const add = (rule, path, start, end) => {
+        if (findings.length >= limits.maxFindings)
+            stop('LIMIT_EXCEEDED');
+        findings.push({ ruleId: rule.id, kind: rule.kind, severity: rule.severity, noteCode: rule.noteCode,
+            ...(path === undefined ? {} : { location: { path, ...(start === undefined ? {} : { start, end }) } }) });
+    };
+    const seen = new Set();
+    const strings = [];
+    const count = async () => {
+        checkAbort();
+        if (++nodes > limits.maxNodes)
+            stop('LIMIT_EXCEEDED');
+        if (nodes % 256 === 0) {
+            await new Promise(resolve => setImmediate(resolve));
+            checkAbort();
+        }
+    };
+    const string = (value, path, order) => {
+        if (/[\uD800-\uDFFF]/u.test(value))
+            stop('INVALID_CONTENT');
+        if (Buffer.byteLength(value) > limits.maxStringLength)
+            stop('LIMIT_EXCEEDED');
+        addBytes(Buffer.byteLength(JSON.stringify(value)));
+        strings.push({ value, path, order });
+    };
+    // Validate JSON without invoking accessors/toJSON, then hash only the bounded snapshot.
+    async function visit(value, path, depth, order = '') {
+        await count();
+        if (depth > limits.maxDepth)
+            stop('LIMIT_EXCEEDED');
+        if (typeof value === 'string') {
+            string(value, path, order);
+            return value;
+        }
+        if (value === null || typeof value === 'boolean' || typeof value === 'number' && Number.isFinite(value)) {
+            addBytes(Buffer.byteLength(JSON.stringify(value)));
+            return value;
+        }
+        if (!value || typeof value !== 'object' || seen.has(value))
+            return stop('INVALID_CONTENT');
+        const array = Array.isArray(value);
+        if (!array && Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+            return stop('INVALID_CONTENT');
+        seen.add(value);
+        const keys = Reflect.ownKeys(value);
+        if (keys.some(key => typeof key !== 'string'))
+            return stop('INVALID_CONTENT');
+        if (keys.length > limits.maxNodes - nodes + (array ? 1 : 0))
+            return stop('LIMIT_EXCEEDED');
+        const result = array ? [] : Object.create(null);
+        const ordered = array ? keys.filter(key => key !== 'length') : keys.sort((a, b) => pointer(a) < pointer(b) ? -1 : pointer(a) > pointer(b) ? 1 : 0);
+        if (array && ordered.length !== value.length)
+            return stop('INVALID_CONTENT');
+        addBytes(2);
+        for (let i = 0; i < ordered.length; i++) {
+            const key = ordered[i];
+            if (array && key !== String(i))
+                return stop('INVALID_CONTENT');
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor.enumerable || !Object.hasOwn(descriptor, 'value'))
+                return stop('INVALID_CONTENT');
+            if (i)
+                addBytes(1);
+            const nextPath = path + '/' + pathSegment(key);
+            const nextOrder = order + '/' + pointer(key);
+            if (!array) {
+                await count();
+                string(key, nextPath, nextOrder);
+                addBytes(1);
+            }
+            const item = await visit(descriptor.value, nextPath, depth + 1, nextOrder);
+            if (array)
+                result.push(item);
+            else
+                result[key] = item;
+        }
+        seen.delete(value);
+        return result;
+    }
+    try {
+        checkAbort();
+        if (!options || typeof options !== 'object' || Object.keys(options).some(key => !Object.hasOwn(limits, key)))
+            stop('INVALID_CONTENT');
+        for (const key of Object.keys(limits)) {
+            const value = options[key];
+            if (value !== undefined) {
+                if (!Number.isSafeInteger(value) || value < 1 || value > CONTENT_INSPECTION_LIMITS[key])
+                    stop('INVALID_CONTENT');
+                limits[key] = value;
+            }
+        }
+        const snapshot = await visit(content, '', 0);
+        if (!snapshot || typeof snapshot !== 'object' || !Object.hasOwn(snapshot, 'manifest') || !Object.hasOwn(snapshot, 'input') ||
+            Object.keys(snapshot).some(key => !['manifest', 'input', 'capabilityChains'].includes(key)))
+            stop('INVALID_CONTENT');
+        contentDigest = digest({ manifest: snapshot.manifest, input: snapshot.input });
+        try {
+            validateManifest(snapshot.manifest);
+        }
+        catch {
+            stop('INVALID_CONTENT');
+        }
+        // Arrays also follow lexical JSON Pointer order (10 precedes 2).
+        strings.sort((a, b) => a.order < b.order ? -1 : a.order > b.order ? 1 : 0);
+        for (const { value, path } of strings) {
+            await new Promise(resolve => setImmediate(resolve));
+            checkAbort();
+            for (const rule of CONTENT_INSPECTION_RULES) {
+                if (!rule.pattern)
+                    continue;
+                const regex = new RegExp(rule.pattern, rule.flags);
+                for (const match of value.matchAll(regex)) {
+                    checkAbort();
+                    const start = match.index, end = start + match[0].length;
+                    if (rule.detector === 'unicode' && match[0] === '\u200d' &&
+                        /\p{Extended_Pictographic}[\uFE0F\p{Emoji_Modifier}]*$/u.test(value.slice(0, start)) &&
+                        /^\p{Extended_Pictographic}/u.test(value.slice(end)))
+                        continue;
+                    if (rule.id === 'secret-request' && !rule.terms.some(term => value.toLowerCase().includes(term)))
+                        continue;
+                    if (rule.detector === 'url') {
+                        try {
+                            const url = new URL(match[0].startsWith('www.') ? 'https://' + match[0] : match[0]);
+                            const host = url.hostname.toLowerCase();
+                            if (url.protocol === 'https:' && !host.includes('xn--') && !/^\[|^\d+(?:\.\d+){3}$/u.test(host) &&
+                                !rule.terms.includes(host.replace(/^www\./u, '')))
+                                continue;
+                        }
+                        catch { /* A recognized URL form that cannot be parsed is still a finding. */ }
+                    }
+                    add(rule, path, start, end);
+                    if (rule.id === 'base64') {
+                        const text = match[0];
+                        const length = Math.floor(text.replace(/=+$/u, '').length * 6 / 8);
+                        if (decodedBytes + length > limits.maxDecodedBytes)
+                            stop('LIMIT_EXCEEDED');
+                        const bytes = Buffer.from(text, 'base64');
+                        decodedBytes += bytes.length;
+                        if (binaryMagic(bytes))
+                            add(CONTENT_INSPECTION_RULES.find(rule => rule.id === 'binary-magic'), path, start, end);
+                    }
+                }
+            }
+        }
+        checkAbort();
+    }
+    catch (code) {
+        failure = ['LIMIT_EXCEEDED', 'ABORTED', 'INVALID_CONTENT'].includes(code)
+            ? code : 'INSPECTOR_FAILED';
+        if (failure === 'LIMIT_EXCEEDED' || failure === 'INVALID_CONTENT') {
+            // Leave room for the failure finding even when the finding cap was reached.
+            const rule = CONTENT_INSPECTION_RULES.find(rule => rule.id === (failure === 'LIMIT_EXCEEDED' ? 'bounds' : 'format'));
+            if (findings.length >= limits.maxFindings)
+                findings.pop();
+            findings.push({ ruleId: rule.id, kind: rule.kind, severity: rule.severity, noteCode: rule.noteCode });
+        }
+    }
+    return { inspectorId: 'rules', inspectorVersion: CONTENT_INSPECTION_RULESET_VERSION,
+        rulesetDigest: CONTENT_INSPECTION_RULESET_DIGEST, contentDigest, sizeBytes, limits,
+        status: failure ? 'error' : 'ok', verdict: failure ? 'error' : findings.some(f => f.severity === 'block') ? 'block' :
+            findings.some(f => f.severity === 'warn') ? 'warn' : 'pass', findings, diagnostics: failure ? [{ code: failure }] : [] };
+}
+//# sourceMappingURL=content-inspection.js.map

package/dist/packages/core/dist/content-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-inspection.js","sourceRoot":"","sources":["../src/content-inspection.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,iCAAiC,EAC7F,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAmB5E,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACxF,+FAA+F;AAC/F,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,8FAA8F,CAAC,IAAI,CAAC,GAAG,CAAC;QACxI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QACpF,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC;SAChH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;AACpG,CAAC;AACD,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B,EAAE,UAAiC,EAAE,EAAE,MAAoB;IAC9H,MAAM,MAAM,GAAoC,EAAE,GAAG,yBAAyB,EAAE,CAAC;IACjF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC;IAC/C,IAAI,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAiD,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAkC,EAAS,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,OAAO;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI,SAAS,GAAG,MAAM,CAAC,QAAQ;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,CAAC,IAAwB,EAAE,IAAa,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE;QACpF,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YAChG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAqD,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtD,IAAI,KAAK,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;QAAC,CAAC;IACrG,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE;QAC5D,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,eAAe;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9E,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,wFAAwF;IACxF,KAAK,UAAU,KAAK,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QAC1E,MAAM,KAAK,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;YACtG,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAqC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAa,CAAC,CAAC,CAAE,IAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1G,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7E,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;YAChE,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClG,IAAI,CAAC;gBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YAC3E,IAAI,KAAK;gBAAG,MAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;gBAAO,MAAkC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtI,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAoC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACjH,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAmC,CAAC;QAC/E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;YACxH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvH,aAAa,GAAG,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC;YAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QAC/E,iEAAiE;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;YACxE,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAC5B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1C,UAAU,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAM,EAAE,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC1D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;wBACtD,wDAAwD,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;wBACpF,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAAE,SAAS;oBACjE,IAAI,IAAI,CAAC,EAAE,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAAE,SAAS;oBAC5G,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAC5B,IAAI,CAAC;4BACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;4BACpF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;4BACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;gCAC7F,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gCAAE,SAAS;wBACjE,CAAC;wBAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;oBACnF,CAAC;oBACD,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC5B,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBACnE,IAAI,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC,eAAe;4BAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;wBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;wBACxE,IAAI,WAAW,CAAC,KAAK,CAAC;4BAAE,GAAG,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,cAAc,CAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBACpH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAc,CAAC;YACjF,CAAC,CAAC,IAAoC,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9D,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAClE,4EAA4E;YAC5E,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAE,CAAC;YACtH,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,kCAAkC;QACjF,aAAa,EAAE,iCAAiC,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM;QAClF,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnH,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/H,CAAC"}

package/dist/packages/core/dist/context-grant.d.ts

@@ -0,0 +1,13 @@
+import type { ContextGrant, ContextGrantOptions, ContextGrantAuditPayload, TaskManifest } from './types.js';
+export declare const CONTEXT_GRANT_MAX_BYTES: number;
+export declare const CONTEXT_GRANT_MAX_LIFETIME_MS: number;
+export declare const CONTEXT_GRANT_DEFAULT_LIFETIME_MS: number;
+/** Time-independent contract checks also apply when verifying historical evidence. */
+export declare function validateContextGrant(grant: unknown, createdAt: string): asserts grant is ContextGrant;
+export declare function validateManifestContextGrant(manifest: TaskManifest): void;
+/** Check live use separately so expired grants remain verifiable in historical contracts. */
+export declare function validateContextGrantUse(manifest: TaskManifest, input: unknown, now?: number): void;
+/** Defaults are opt-in and never widen a supplied declaration. */
+export declare function buildContextGrant(options: ContextGrantOptions, createdAt?: string): ContextGrant;
+/** Only these two fields enter context lifecycle audit payloads. */
+export declare function contextGrantAuditPayload(grant: ContextGrant): ContextGrantAuditPayload;

package/dist/packages/core/dist/context-grant.js

@@ -0,0 +1,65 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest } from './crypto.js';
+import { validateSchema } from './schema.js';
+export const CONTEXT_GRANT_MAX_BYTES = 64 * 1024;
+export const CONTEXT_GRANT_MAX_LIFETIME_MS = 7 * 24 * 60 * 60 * 1000;
+export const CONTEXT_GRANT_DEFAULT_LIFETIME_MS = 24 * 60 * 60 * 1000;
+/** Time-independent contract checks also apply when verifying historical evidence. */
+export function validateContextGrant(grant, createdAt) {
+    validateSchema('context-grant', grant);
+    const g = grant;
+    if (g.inputRetentionAllowed === true)
+        throw new Error('CONTEXT_GRANT_INPUT_RETENTION_UNAVAILABLE');
+    const start = Date.parse(createdAt), end = Date.parse(g.expiresAt);
+    if (!Number.isFinite(start) || end <= start || end - start > CONTEXT_GRANT_MAX_LIFETIME_MS)
+        throw new Error('CONTEXT_GRANT_EXPIRY_INVALID');
+    const denied = new Set(g.fieldsDenied);
+    if (g.fieldsAllowed?.some(field => denied.has(field)))
+        throw new Error('CONTEXT_GRANT_FIELDS_CONFLICT');
+}
+export function validateManifestContextGrant(manifest) {
+    const grant = manifest.contextGrant;
+    if (!grant)
+        return;
+    validateContextGrant(grant, manifest.createdAt);
+    if (manifest.protocolVersion !== '0.2.0')
+        throw new Error('CONTEXT_GRANT_PROTOCOL_UNSUPPORTED');
+    if (manifest.permissions.maxDelegationDepth !== (grant.deliveryMode === 'approval_redelegation' ? 1 : 0))
+        throw new Error('CONTEXT_GRANT_DEPTH_CONFLICT');
+    if (grant.deliveryMode !== 'hand_over' && manifest.sandboxPolicy.filesystemScope !== 'ephemeral_workspace_only')
+        throw new Error('CONTEXT_GRANT_FILESYSTEM_CONFLICT');
+}
+/** Check live use separately so expired grants remain verifiable in historical contracts. */
+export function validateContextGrantUse(manifest, input, now = Date.now()) {
+    validateManifestContextGrant(manifest);
+    const grant = manifest.contextGrant;
+    if (!grant)
+        return;
+    if (!Number.isFinite(now) || Date.parse(grant.expiresAt) <= now)
+        throw new Error('CONTEXT_GRANT_EXPIRED');
+    const bytes = JSON.stringify(input);
+    if (bytes === undefined || Buffer.byteLength(bytes, 'utf8') > grant.maxBytes)
+        throw new Error('CONTEXT_GRANT_MAX_BYTES_EXCEEDED');
+}
+/** Defaults are opt-in and never widen a supplied declaration. */
+export function buildContextGrant(options, createdAt = new Date().toISOString()) {
+    const mode = options.deliveryMode === undefined ? 'view_only' : options.deliveryMode;
+    const grant = structuredClone({
+        ...options,
+        deliveryMode: mode,
+        expiresAt: options.expiresAt === undefined
+            ? new Date(Date.parse(createdAt) + CONTEXT_GRANT_DEFAULT_LIFETIME_MS).toISOString() : options.expiresAt,
+        maxBytes: options.maxBytes === undefined ? CONTEXT_GRANT_MAX_BYTES : options.maxBytes,
+        retention: options.retention === undefined
+            ? mode === 'hand_over' ? 'keep_deliverable' : 'ephemeral_view' : options.retention,
+        inputRetentionAllowed: options.inputRetentionAllowed === undefined ? false : options.inputRetentionAllowed,
+    });
+    validateContextGrant(grant, createdAt);
+    return grant;
+}
+/** Only these two fields enter context lifecycle audit payloads. */
+export function contextGrantAuditPayload(grant) {
+    validateSchema('context-grant', grant);
+    return { grantDigest: digest(grant), deliveryMode: grant.deliveryMode };
+}
+//# sourceMappingURL=context-grant.js.map

package/dist/packages/core/dist/context-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-grant.js","sourceRoot":"","sources":["../src/context-grant.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrE,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErE,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,SAAiB;IACpE,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,KAAqB,CAAC;IAChC,IAAI,CAAC,CAAC,qBAAqB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,GAAG,KAAK,GAAG,6BAA6B;QACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAsB;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChG,IAAI,QAAQ,CAAC,WAAW,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1J,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,CAAC,eAAe,KAAK,0BAA0B;QAC7G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACzD,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,uBAAuB,CAAC,QAAsB,EAAE,KAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC9F,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ;QAC1E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACxD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,OAA4B,EAAE,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAClG,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACrF,MAAM,KAAK,GAAiB,eAAe,CAAC;QAC1C,GAAG,OAAO;QACV,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;YACxC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,iCAAiC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;QACzG,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ;QACrF,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;YACxC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;QACpF,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB;KAC3G,CAAC,CAAC;IACH,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CAAC,KAAmB;IAC1D,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAC1E,CAAC"}

package/dist/packages/core/dist/delegation.d.ts

@@ -0,0 +1,17 @@
+import type { TaskContract } from './contract.js';
+import type { DelegationLink, DelegationProof, KeyPair, TaskManifest } from './types.js';
+/** Literal declaration comparison only; it does not interpret selectors or inspect provenance. */
+export declare function assertDelegationAttenuation(parent: TaskManifest, child: TaskManifest): void;
+/** Historical verification has no implicit current clock. Siblings are separate one-edge chains. */
+export declare function verifyDelegationChain(input: {
+    rootContract: TaskContract;
+    chain: readonly DelegationProof[];
+}): {
+    depthRemaining: number;
+    delegateeOwnerDids: string[];
+};
+export declare function createDelegationLink(input: {
+    parentContract: TaskContract;
+    childContract: TaskContract;
+    issuedAt?: string;
+}, delegator: KeyPair): DelegationLink;

package/dist/packages/core/dist/delegation.js

@@ -0,0 +1,126 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest, signPayload, verifySigned } from './crypto.js';
+import { verifyContract } from './contract.js';
+import { validateManifest, validateSchema } from './schema.js';
+const maxima = ['maxInputTokens', 'maxOutputTokens', 'maxToolInvocations', 'maxWallClockSeconds'];
+const equal = (a, b) => digest(a) === digest(b);
+function fail(code = 'DELEGATION_INVALID') { throw new Error(code); }
+function time(value) {
+    const n = Date.parse(value);
+    if (!Number.isFinite(n))
+        fail();
+    return n;
+}
+function root(manifest) {
+    if (manifest.protocolVersion !== '0.2.0' || manifest.contextGrant?.deliveryMode !== 'approval_redelegation')
+        fail('DELEGATION_INVALID');
+    if (manifest.permissions.maxDelegationDepth !== 1)
+        fail('DELEGATION_INVALID');
+}
+/** Literal declaration comparison only; it does not interpret selectors or inspect provenance. */
+export function assertDelegationAttenuation(parent, child) {
+    root(parent);
+    try {
+        validateManifest(parent);
+        validateManifest(child);
+    }
+    catch {
+        fail();
+    }
+    const p = parent.contextGrant, c = child.contextGrant;
+    if (!c || c.deliveryMode !== 'view_only' || c.retention !== 'ephemeral_view' || c.inputRetentionAllowed === true)
+        fail('DELEGATION_INVALID');
+    if (child.permissions.maxDelegationDepth !== 0)
+        fail('DELEGATION_INVALID');
+    if (child.permissions.grantedCapabilities.length)
+        fail('DELEGATION_INVALID');
+    if (time(child.createdAt) < time(parent.createdAt) || time(child.deadline) <= time(child.createdAt) ||
+        time(parent.deadline) <= time(parent.createdAt))
+        fail();
+    if (time(child.deadline) > time(parent.deadline) || time(c.expiresAt) > time(p.expiresAt) || c.maxBytes > p.maxBytes)
+        fail('DELEGATION_INVALID');
+    for (const name of maxima)
+        if (child.budget[name] > parent.budget[name])
+            fail('DELEGATION_INVALID');
+    const withoutMaxima = (m) => Object.fromEntries(Object.entries(m.budget).filter(([k]) => !maxima.includes(k)));
+    if (!equal(withoutMaxima(parent), withoutMaxima(child)) || !equal(parent.sandboxPolicy, child.sandboxPolicy) ||
+        !equal(parent.verification, child.verification))
+        fail('DELEGATION_INVALID');
+    if (!c.selectors.length || c.selectors.some(s => !p.selectors.includes(s)) ||
+        p.fieldsAllowed && (!c.fieldsAllowed?.length || c.fieldsAllowed.some(f => !p.fieldsAllowed.includes(f))) ||
+        c.fieldsAllowed && !c.fieldsAllowed.length ||
+        p.fieldsDenied?.some(f => !c.fieldsDenied?.includes(f)) ||
+        p.outputSchema !== undefined && (c.outputSchema === undefined || !equal(p.outputSchema, c.outputSchema)))
+        fail('DELEGATION_INVALID');
+    const narrower = c.selectors.length < p.selectors.length ||
+        (p.fieldsAllowed ? !!c.fieldsAllowed && c.fieldsAllowed.length < p.fieldsAllowed.length : !!c.fieldsAllowed?.length);
+    if (!narrower)
+        fail('DELEGATION_INVALID');
+}
+function actualLimits(child) {
+    return structuredClone({ deadline: child.deadline, expiresAt: child.contextGrant.expiresAt,
+        budget: child.budget, sandboxPolicy: child.sandboxPolicy, verification: child.verification,
+        depthRemaining: child.permissions.maxDelegationDepth });
+}
+/** Historical verification has no implicit current clock. Siblings are separate one-edge chains. */
+export function verifyDelegationChain(input) {
+    const { rootContract: parent, chain } = input;
+    if (!verifyContract(parent))
+        fail();
+    root(parent.manifest);
+    if (!Array.isArray(chain) || !chain.length)
+        fail('DELEGATION_PROOF_REQUIRED');
+    if (chain.length > 1 || chain.length > parent.manifest.permissions.maxDelegationDepth)
+        fail('DELEGATION_INVALID');
+    const proof = chain[0];
+    try {
+        validateSchema('delegation-attachment', { parentContract: parent, children: [proof] });
+    }
+    catch {
+        fail();
+    }
+    const child = proof.childContract, link = proof.link, l = link.payload;
+    if (!verifyContract(child))
+        fail();
+    const a = parent.manifest.requester.ownerDid, b = parent.manifest.worker.ownerDid, c = child.manifest.worker.ownerDid;
+    if (new Set([a, b, c]).size !== 3 || b !== child.manifest.requester.ownerDid ||
+        parent.manifest.taskId === child.manifest.taskId || !verifySigned(link, b) ||
+        l.delegatorOwnerDid !== b || l.delegateeOwnerDid !== c || l.parentTaskId !== parent.manifest.taskId ||
+        l.childTaskId !== child.manifest.taskId || l.parentContractDigest !== parent.contractDigest ||
+        l.childContractDigest !== child.contractDigest || l.prevLinkDigest !== null)
+        fail();
+    const remaining = parent.manifest.permissions.maxDelegationDepth - 1;
+    if (l.depthRemaining !== remaining || l.limits.depthRemaining !== remaining || child.manifest.permissions.maxDelegationDepth !== remaining)
+        fail('DELEGATION_INVALID');
+    assertDelegationAttenuation(parent.manifest, child.manifest);
+    if (!equal(l.limits, actualLimits(child.manifest)))
+        fail('DELEGATION_INVALID');
+    const issued = time(l.issuedAt);
+    if (l.issuedAt !== link.signature.signedAt || time(child.acceptance.signature.signedAt) > issued ||
+        time(child.manifest.createdAt) > time(child.acceptance.signature.signedAt) ||
+        [parent.manifest, child.manifest].some(m => issued >= time(m.deadline) || issued >= time(m.contextGrant.expiresAt)))
+        fail();
+    return { depthRemaining: remaining, delegateeOwnerDids: [c] };
+}
+export function createDelegationLink(input, delegator) {
+    const { parentContract: parent, childContract: child } = input;
+    if (!verifyContract(parent) || !verifyContract(child))
+        fail();
+    assertDelegationAttenuation(parent.manifest, child.manifest);
+    const issuedAt = input.issuedAt ?? new Date().toISOString();
+    time(issuedAt);
+    let link;
+    try {
+        link = signPayload({ type: 'DelegationLink', parentTaskId: parent.manifest.taskId,
+            parentContractDigest: parent.contractDigest, childTaskId: child.manifest.taskId,
+            childContractDigest: child.contractDigest, delegatorOwnerDid: delegator.did,
+            delegateeOwnerDid: child.manifest.worker.ownerDid, depthRemaining: 0, limits: actualLimits(child.manifest),
+            issuedAt, prevLinkDigest: null }, delegator, issuedAt);
+    }
+    catch {
+        fail();
+    }
+    verifyDelegationChain({ rootContract: parent, chain: [{ link, childContract: child }] });
+    return link;
+}
+//# sourceMappingURL=delegation.js.map

package/dist/packages/core/dist/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG/D,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,qBAAqB,CAAU,CAAC;AAC3G,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;AAClE,SAAS,IAAI,CAAC,IAAI,GAAG,oBAAoB,IAAW,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5E,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;IAChC,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,IAAI,CAAC,QAAsB;IAClC,IAAI,QAAQ,CAAC,eAAe,KAAK,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE,YAAY,KAAK,uBAAuB;QACzG,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,IAAI,QAAQ,CAAC,WAAW,CAAC,kBAAkB,KAAK,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAChF,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,2BAA2B,CAAC,MAAoB,EAAE,KAAmB;IACnF,IAAI,CAAC,MAAM,CAAC,CAAC;IACb,IAAI,CAAC;QAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAC5E,MAAM,CAAC,GAAG,MAAM,CAAC,YAAa,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;IACvD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,KAAK,gBAAgB,IAAI,CAAC,CAAC,qBAAqB,KAAK,IAAI;QAC9G,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,WAAW,CAAC,kBAAkB,KAAK,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ;QAClH,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpG,MAAM,aAAa,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAA0B,CAAC,CAAC,CAAC,CAAC;IACtJ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;QACxG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM;QAC1C,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1G,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM;QACtD,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACvH,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC;AACD,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,YAAa,CAAC,SAAS;QACzF,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;QAC1F,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC5D,CAAC;AACD,oGAAoG;AACpG,MAAM,UAAU,qBAAqB,CAAC,KAAwE;IAE5G,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAClH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC;QAAC,cAAc,CAAC,uBAAuB,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACjH,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAO,CAAC,QAAQ,CAAC;IACxH,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;QACxE,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QACnG,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,oBAAoB,KAAK,MAAM,CAAC,cAAc;QAC3F,CAAC,CAAC,mBAAmB,KAAK,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI;QAAE,IAAI,EAAE,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,kBAAkB,KAAK,SAAS;QACxI,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC7B,2BAA2B,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,MAAM;QAC5F,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;QAC1E,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,YAAa,CAAC,SAAS,CAAC,CAAC;QAAE,IAAI,EAAE,CAAC;IACjI,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAuF,EAAE,SAAkB;IAC9I,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAC;IAC9D,2BAA2B,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,CAAC;IACf,IAAI,IAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,IAAI,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,gBAAyB,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9F,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC/E,mBAAmB,EAAE,KAAK,CAAC,cAAc,EAAE,iBAAiB,EAAE,SAAS,CAAC,GAAG;YAC3E,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3G,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACnB,qBAAqB,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/packages/core/dist/edge.d.ts

@@ -1,5 +1,7 @@
 export * from './types.js';
 export * from './crypto.js';
 export * from './discovery.js';
+export * from './invite-link.js';
+export * from './invite-sas.js';
 export * from './relay-auth.js';
 export * from './delivery-status.js';

package/dist/packages/core/dist/edge.js

@@ -2,6 +2,8 @@
 export * from './types.js';
 export * from './crypto.js';
 export * from './discovery.js';
+export * from './invite-link.js';
+export * from './invite-sas.js';
 export * from './relay-auth.js';
 export * from './delivery-status.js';
 //# sourceMappingURL=edge.js.map

package/dist/packages/core/dist/edge.js.map

@@ -1 +1 @@
-{"version":3,"file":"edge.js","sourceRoot":"","sources":["../src/edge.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"edge.js","sourceRoot":"","sources":["../src/edge.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC"}

package/dist/packages/core/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from './types.js';
+export * from './context-grant.js';
 export * from './crypto.js';
 export * from './schema.js';
 export * from './protocol.js';
@@ -6,7 +7,12 @@ export * from './capability.js';
 export * from './receipts.js';
 export * from './contract.js';
 export * from './discovery.js';
+export * from './invite-link.js';
+export * from './invite-sas.js';
 export * from './connection.js';
 export * from './relay-auth.js';
 export * from './revocation.js';
 export * from './delivery-status.js';
+export * from './delegation.js';
+export * from './content-inspection.js';
+export * from './content-inspection-rules.js';

package/dist/packages/core/dist/index.js

@@ -1,4 +1,5 @@
 export * from './types.js';
+export * from './context-grant.js';
 export * from './crypto.js';
 export * from './schema.js';
 export * from './protocol.js';
@@ -6,8 +7,13 @@ export * from './capability.js';
 export * from './receipts.js';
 export * from './contract.js';
 export * from './discovery.js';
+export * from './invite-link.js';
+export * from './invite-sas.js';
 export * from './connection.js';
 export * from './relay-auth.js';
 export * from './revocation.js';
 export * from './delivery-status.js';
+export * from './delegation.js';
+export * from './content-inspection.js';
+export * from './content-inspection-rules.js';
 //# sourceMappingURL=index.js.map

package/dist/packages/core/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC"}

package/dist/packages/core/dist/invite-link.d.ts

@@ -0,0 +1,72 @@
+import type { RelayEndpointPolicy } from './discovery.js';
+export declare const INVITE_LINK_CONTEXT = "sealbridge/invite-link/v1";
+/** UTF-8 info labels; each HKDF uses K as IKM and an empty salt (RFC 5869). */
+export declare const INVITE_LINK_HKDF_INFO: Readonly<{
+    id: string;
+    encKey: string;
+    accessKey: string;
+}>;
+export declare const INVITE_LINK_PAD_BLOCK_BYTES = 4096;
+export declare const INVITE_LINK_MAX_PADDED_BYTES = 16384;
+export declare const INVITE_LINK_DEFAULT_TTL_MS: number;
+export declare const INVITE_LINK_MAX_TTL_MS: number;
+export declare const INVITE_LINK_TOKEN_GRACE_MS: number;
+export interface InviteLinkKeys {
+    id: Buffer;
+    encKey: Buffer;
+    accessKey: Buffer;
+}
+export interface InviteLinkCiphertext {
+    id: Uint8Array;
+    /** Encrypted padded plaintext followed by the 16-byte GCM authentication tag. */
+    ciphertext: Uint8Array;
+    nonce: Uint8Array;
+    expiresAt: string;
+}
+/** Relay storage encoding. No K, plaintext, claim tag, or verification number. */
+export interface InviteLinkStorage {
+    id: string;
+    ciphertext: string;
+    nonce: string;
+    expiresAt: string;
+}
+export interface InviteLinkRelayPolicy extends RelayEndpointPolicy {
+    /** Same URL comparison as application relay allow-lists (origin + pathname). */
+    allowedRelayUrls?: readonly string[];
+}
+export interface ParsedInviteLink {
+    v: 1;
+    k: string;
+    relayOrigin: string;
+}
+/** Returns the link deadline and the inner token deadline (link + 24 hours). */
+export declare function inviteLinkExpiry(now?: number, ttlMs?: number): {
+    expiresAt: string;
+    tokenExpiresAt: string;
+};
+/** The returned k is exactly 43 unpadded base64url characters encoding 32 random bytes. */
+export declare function generateInviteLinkKey(): string;
+export declare function deriveInviteLinkKeys(k: string): InviteLinkKeys;
+/** Exact bytes: HMAC-SHA256(accessKey, UTF8("claim") || raw 16-byte id). */
+export declare function inviteLinkClaimTag(accessKey: Uint8Array, id: Uint8Array): Buffer;
+/**
+ * AAD = UTF8(context) || raw id || UTF8(normalizeRelayOrigin(relayOrigin)) ||
+ * UTF8(expiresAt). No separators, length prefixes, JSON, or terminating NULs.
+ * The origin has no path, trailing slash, or default port; ws(s) maps to http(s).
+ */
+export declare function inviteLinkAad(id: Uint8Array, relayOrigin: string, expiresAt: string): Buffer;
+/** Four-byte big-endian UTF-8 byte length, token bytes, then zero padding. */
+export declare function padInviteLinkToken(token: string): Buffer;
+export declare function unpadInviteLinkToken(padded: Uint8Array): string;
+export declare function packInviteLinkCiphertext(value: InviteLinkCiphertext): InviteLinkStorage;
+/** Strict local decoding of an untrusted relay response, without contacting a relay. */
+export declare function unpackInviteLinkCiphertext(value: unknown): InviteLinkCiphertext;
+/** Opaque token wrapping only. Signature/card/relay verification remains the caller's next step. */
+export declare function encryptInviteLink(token: string, k: string, options: {
+    relayOrigin: string;
+    expiresAt: string;
+    now?: number;
+}): InviteLinkCiphertext;
+export declare function decryptInviteLink(value: InviteLinkCiphertext, k: string, relayOrigin: string, now?: number): string;
+/** Only the two v1 fragment forms are accepted. Parsing performs no network I/O. */
+export declare function parseInviteLink(uri: string, policy?: InviteLinkRelayPolicy): ParsedInviteLink;