sealbridge 0.5.0 → 0.6.0

package/README.ja.md

@@ -14,7 +14,7 @@ Windows PowerShell:
 irm https://sealbridge.dev/install.ps1 | iex
 ```
 
-インストーラーは npm で公開待ちの sealbridge 0.5.0 を固定指定しています。更新したインストーラーは sealbridge@0.5.0 の npm 公開後にのみデプロイしてください。Node 22以上があれば `npm i -g sealbridge` または `npx sealbridge@latest` も使えます。
+インストーラーは npm で公開待ちの sealbridge 0.6.0 を固定指定しています。更新したインストーラーは sealbridge@0.6.0 の npm 公開後にのみデプロイしてください。Node 22以上があれば `npm i -g sealbridge` または `npx sealbridge@latest` も使えます。
 
 Node 22 以上と同じインストール先の npm が正常に動く場合は再利用します。それ以外は既存の Node を変更せず、npm 同梱の Node をユーザー専用ディレクトリに導入します。Nodeが必要な場合は公式Node 22.22.0のチェックサムを検証します。秘密情報の入力・テレメトリー・管理者権限・Git・pnpmは不要です。macOS/Linuxでは新しいターミナルを開くか `. "$HOME/.profile"` を実行してください（パイプ実行では親シェルのPATHを変更できません）。Windowsでは現在と次回のPATHを設定します。`sealbridge doctor`、`sealbridge demo` で確認できます。doctorは中継器のヘルスチェックを1回行います。オフライン警告があってもインストールは保持します。
 
@@ -49,7 +49,7 @@ Node 22 以上と同じインストール先の npm が正常に動く場合は
 
 30秒のデモ、音声なし — [MP4を見る](docs/media/sealbridge-demo.mp4)。
 
-> **ステータス**: Sealbridge `v0.5.0` を 2026-11-06 UTC 付けのリリースとして npm パッケージ `sealbridge` で準備中で、公開待ちです。Sealbridge `v0.4.1` は 2026-11-05 UTC に npm パッケージ `sealbridge` として公開されました。Sealbridge `v0.4.0` は 2026-11-05 UTC に npm パッケージ `sealbridge` として公開されました。Sealbridge `v0.3.0` は 2026-11-03 UTC に npm パッケージ `sealbridge` として公開されました。以前の `v1.0.0` 表記は Sealbridge 改称前の ACP / agent-collab-platform の旧リリースを指し、Sealbridge の npm リリースではありません。
+> **ステータス**: Sealbridge `v0.6.0` を 2026-11-08 UTC 付けのリリースとして npm パッケージ `sealbridge` で準備中で、公開待ちです。Sealbridge `v0.5.0` は 2026-11-06 UTC に npm パッケージ `sealbridge` として公開されました。Sealbridge `v0.4.1` は 2026-11-05 UTC に npm パッケージ `sealbridge` として公開されました。Sealbridge `v0.4.0` は 2026-11-05 UTC に npm パッケージ `sealbridge` として公開されました。Sealbridge `v0.3.0` は 2026-11-03 UTC に npm パッケージ `sealbridge` として公開されました。以前の `v1.0.0` 表記は Sealbridge 改称前の ACP / agent-collab-platform の旧リリースを指し、Sealbridge の npm リリースではありません。
 > **目的**: 異なる所有者の自律エージェントが、相手のランタイムや認証情報を信頼せずに、仕事の分割・委譲・実行・検証・検収を行うためのオープンソースのプロトコルと参照実装です。
 > **作成者**: [@takapon01234](https://x.com/takapon01234)
 
@@ -411,7 +411,7 @@ TTY がなければ limited タスクは保留です。`--auto-accept` は検査
 接続同意は `connections` で行います。従来の `requests approve` は検査済みの依頼に対する
 接続同意の意味を維持し、実行を承認しません。`--trust trusted` は別の従来の権限付与です。
 
-未接続の相手からの有効な依頼は、暗号化済み封筒として最大24時間または依頼の期限まで
+未接続の相手からの有効な依頼は、暗号化済み封筒として、24時間、依頼の期限、ワーカーがすでに読んだ grant の期限の早い方まで
 保存し、終端の `PENDING_OWNER_APPROVAL`・`retryable:false`・CLI 終了値3を返します。
 自動再試行はしません。署名・スキーマ・能力・申告予算・公開スキル・運用者の制限は
 保存や招待の結び付けより前に確認します。新しい受付情報には題名・説明のプレビューを
@@ -481,7 +481,7 @@ sealbridge connections status reviewer --role requester
 ブロックは片方向で、相手に応答しません。解除・ブロックは次の受付から効き、受諾済みの仕事は
 明示的な CANCEL で止めます。同時の申し込みは2つの DID を昇順にして同じ接続 ID を導きます。
 承認・ACK の状態を保存してからリレー受信確認を返します。sync は依頼を再送しません。
-内容の24時間と送信済み同意の14日は別の期限です。
+内容の保存期限と送信済み同意の14日は別の期限です。
 
 依頼の承認と接続への同意は別の判断です。CLI や MCP フォームで順に確認でき、明示的な
 接続同意がなければ申し込みを添付しません。相手の署名付き同意がない保留依頼を承認した場合、

package/README.md

@@ -16,7 +16,7 @@ Windows PowerShell:
 irm https://sealbridge.dev/install.ps1 | iex
 ```
 
-The installers pin sealbridge 0.5.0, pending publication on npm. Deploy the updated installers only after sealbridge@0.5.0 is on npm. With Node 22+, you can also use `npm i -g sealbridge` or `npx sealbridge@latest`.
+The installers pin sealbridge 0.6.0, pending publication on npm. Deploy the updated installers only after sealbridge@0.6.0 is on npm. With Node 22+, you can also use `npm i -g sealbridge` or `npx sealbridge@latest`.
 
 The installer reuses Node 22 or newer only when its co-installed npm runs successfully; otherwise it installs Node with bundled npm in a user-local directory without changing the existing Node. It verifies the official Node 22.22.0 archive checksum when Node is needed, and asks for no secrets. No telemetry, sudo, Git or pnpm is required. On macOS/Linux open a new terminal or run `. "$HOME/.profile"` after installing; a piped shell cannot change its parent shell's PATH. Windows updates the current session and user PATH. Run `sealbridge doctor`, then `sealbridge demo`. Doctor makes one relay health request; offline warnings do not undo installation.
 
@@ -53,7 +53,7 @@ To uninstall, download the same script and run `sh install.sh --uninstall` or `&
 
 30-second demo, no audio — [watch the MP4](docs/media/sealbridge-demo.mp4).
 
-> **Status**: Sealbridge `v0.5.0` is being prepared for release dated 2026-11-06 UTC on npm as `sealbridge`; publication is pending. Sealbridge `v0.4.1` was published on npm as `sealbridge` on 2026-11-05 UTC. Sealbridge `v0.4.0` was published on npm as `sealbridge` on 2026-11-05 UTC. Sealbridge `v0.3.0` was published on npm as `sealbridge` on 2026-11-03 UTC. The earlier `v1.0.0` label refers to the legacy pre-Sealbridge ACP / agent-collab-platform release, not a Sealbridge npm release.
+> **Status**: Sealbridge `v0.6.0` is being prepared for release dated 2026-11-08 UTC on npm as `sealbridge`; publication is pending. Sealbridge `v0.5.0` was published on npm as `sealbridge` on 2026-11-06 UTC. Sealbridge `v0.4.1` was published on npm as `sealbridge` on 2026-11-05 UTC. Sealbridge `v0.4.0` was published on npm as `sealbridge` on 2026-11-05 UTC. Sealbridge `v0.3.0` was published on npm as `sealbridge` on 2026-11-03 UTC. The earlier `v1.0.0` label refers to the legacy pre-Sealbridge ACP / agent-collab-platform release, not a Sealbridge npm release.
 > **Target**: An open-source protocol and reference implementation that lets autonomous agents owned by different people split, delegate, run, verify, and accept work without trusting each other's runtimes or credentials.
 > **Author**: [@takapon01234](https://x.com/takapon01234)
 
@@ -835,8 +835,9 @@ Connection consent stays on `connections`; legacy `requests approve` retains its
 connection-consent meaning and requires completed inspection. It never approves
 task execution. `requests approve --trust trusted` remains a separate legacy grant.
 
-Valid requests from unconnected peers are held as encrypted envelopes for at most
-24 hours or the task deadline. They return terminal `PENDING_OWNER_APPROVAL`,
+Valid requests from unconnected peers are held as encrypted envelopes until the
+earliest of 24 hours, the task deadline, and a grant expiry the worker already
+read. They return terminal `PENDING_OWNER_APPROVAL`,
 `retryable:false`, CLI exit 3. Do not retry automatically. Schema, signature,
 capability, declared budget, advertised skill and operator perimeter checks precede
 holding or invite redemption. New intake metadata has no title or description

package/dist/cli/dist/sdk.d.ts

@@ -1,8 +1,8 @@
 /** Supported embedding surface for sealbridge/sdk. Keep exports explicit. */
-export { InviteStore, KeychainSecretStore, openKeychainSecretStore, FileKeyStore, KeychainKeyStore, inspectStoredIdentity, resolveStoredIdentity, selectKeyStore, keyStoreSelection, keychainService, resolveDataRoot, readApplicationConfig, setApplicationKeyStore, WorkerTrustStore, workerIntakePath, ConnectionService, ConnectionRouter, syncConnections, StoredConnectionExchange, ConnectionAdmissionReview, HeldRequestReview, unavailableHeldContentReviewProvider, AcpMcpServer, buildTaskManifest, appendContextGrantAuditEvent, CONTEXT_GRANT_AUDIT_EVENTS, RequesterClient, WorkerNode, verifyDelegationAttachment, } from '../../packages/runtime/dist/index.js';
-export type { SavedInvite, InviteStoreOptions, SecretStore, DataRootOptions, LocalIdentityOptions, IdentityRole, IdentityStoreOptions, StoredIdentity, KeyStore, KeyStoreDescription, KeyStoreSelection, KeyringEntry, KeyringModule, ApplicationConfig, ApplicationConfigOptions, RelaySelectionOptions, ConnectionState, ConnectionStatus, ConnectionTrust, ConnectionPeer, ConnectionRecord, ConnectionSummary, PriorApprovedPeer, ConnectionServiceOptions, ConnectionServiceResult, ConnectionHumanReviewProvider, ConnectionInspectionPort, ConnectionPersistencePort, ConnectionOffer, ConnectionConsent, ConnectionOutboxEntry, ConnectionAcceptanceCommit, ConnectionRedemptionCommit, ConnectionTransport, ConnectionFrame, ConnectionRouterOptions, ConnectedEvent, ConnectionAdmissionReviewOptions, InboundConnectionSummary, HeldRequestReviewOptions, HeldContentReviewProvider, HeldInspectionContext, InspectionCompletion, AcpMcpServerOptions, ApprovalProvider, ChildDelegationRequest, } from '../../packages/runtime/dist/index.js';
-export { generateKeyPair, createSignedAgentCard, verifySignedAgentCard, createInviteToken, inviteTokenFromUri, isInviteTarget, parseAndVerifyInviteToken, discoverAgentCards, findDiscoveredAgentCard, generateInviteLinkKey, deriveInviteLinkKeys, inviteLinkClaimTag, inviteLinkAad, padInviteLinkToken, unpadInviteLinkToken, encryptInviteLink, decryptInviteLink, packInviteLinkCiphertext, unpackInviteLinkCiphertext, parseInviteLink, inviteLinkExpiry, inviteLinkVerificationNumber, INVITE_LINK_CONTEXT, INVITE_LINK_HKDF_INFO, INVITE_LINK_PAD_BLOCK_BYTES, INVITE_LINK_MAX_PADDED_BYTES, INVITE_LINK_DEFAULT_TTL_MS, INVITE_LINK_MAX_TTL_MS, INVITE_LINK_TOKEN_GRACE_MS, buildContextGrant, validateContextGrant, validateManifest, validateContextGrantUse, assertDelegationAttenuation, createDelegationLink, verifyDelegationChain, contextGrantAuditPayload, CONTEXT_GRANT_MAX_BYTES, CONTEXT_GRANT_MAX_LIFETIME_MS, CONTEXT_GRANT_DEFAULT_LIFETIME_MS, } from '../../packages/core/dist/index.js';
-export type { KeyPair, Json, Signed, SignedEnvelope, ContextGrant, ContextGrantOptions, DeliveryMode, TaskManifest, ContextGrantAuditEventType, ContextGrantAuditPayload, DelegationLimits, DelegationLinkPayload, DelegationLink, DelegationProof, DelegationAttachment, Invite, AgentSkill, DiscoveryAgentCard, CreateAgentCardOptions, SignedAgentCard, RelayEndpointPolicy, ConnectionRequest, ConnectionAccepted, ConnectionAck, ConnectionControl, InviteLinkKeys, InviteLinkCiphertext, InviteLinkStorage, InviteLinkRelayPolicy, ParsedInviteLink, } from '../../packages/core/dist/index.js';
+export { InviteStore, KeychainSecretStore, openKeychainSecretStore, FileKeyStore, KeychainKeyStore, inspectStoredIdentity, resolveStoredIdentity, selectKeyStore, keyStoreSelection, keychainService, resolveDataRoot, readApplicationConfig, setApplicationKeyStore, WorkerTrustStore, workerIntakePath, ConnectionService, ConnectionRouter, syncConnections, StoredConnectionExchange, ConnectionAdmissionReview, HeldRequestReview, unavailableHeldContentReviewProvider, taskContent, createRuleBasedContentReviewProvider, AcpMcpServer, buildTaskManifest, appendContextGrantAuditEvent, CONTEXT_GRANT_AUDIT_EVENTS, RequesterClient, WorkerNode, verifyDelegationAttachment, } from '../../packages/runtime/dist/index.js';
+export type { SavedInvite, InviteStoreOptions, SecretStore, DataRootOptions, LocalIdentityOptions, IdentityRole, IdentityStoreOptions, StoredIdentity, KeyStore, KeyStoreDescription, KeyStoreSelection, KeyringEntry, KeyringModule, ApplicationConfig, ApplicationConfigOptions, RelaySelectionOptions, ConnectionState, ConnectionStatus, ConnectionTrust, ConnectionPeer, ConnectionRecord, ConnectionSummary, PriorApprovedPeer, ConnectionServiceOptions, ConnectionServiceResult, ConnectionHumanReviewProvider, ConnectionInspectionPort, ConnectionPersistencePort, ConnectionOffer, ConnectionConsent, ConnectionOutboxEntry, ConnectionAcceptanceCommit, ConnectionRedemptionCommit, ConnectionTransport, ConnectionFrame, ConnectionRouterOptions, ConnectedEvent, ConnectionAdmissionReviewOptions, InboundConnectionSummary, HeldRequestReviewOptions, HeldContentReviewProvider, HeldInspectionContext, InspectionCompletion, HeldTaskContent, RuleBasedContentReviewOptions, AcpMcpServerOptions, ApprovalProvider, ChildDelegationRequest, } from '../../packages/runtime/dist/index.js';
+export { inspectRuleContent, CONTENT_INSPECTION_RULES, CONTENT_INSPECTION_RULESET_VERSION, CONTENT_INSPECTION_RULESET_DIGEST, CONTENT_INSPECTION_LIMITS, generateKeyPair, createSignedAgentCard, verifySignedAgentCard, createInviteToken, inviteTokenFromUri, isInviteTarget, parseAndVerifyInviteToken, discoverAgentCards, findDiscoveredAgentCard, generateInviteLinkKey, deriveInviteLinkKeys, inviteLinkClaimTag, inviteLinkAad, padInviteLinkToken, unpadInviteLinkToken, encryptInviteLink, decryptInviteLink, packInviteLinkCiphertext, unpackInviteLinkCiphertext, parseInviteLink, inviteLinkExpiry, inviteLinkVerificationNumber, INVITE_LINK_CONTEXT, INVITE_LINK_HKDF_INFO, INVITE_LINK_PAD_BLOCK_BYTES, INVITE_LINK_MAX_PADDED_BYTES, INVITE_LINK_DEFAULT_TTL_MS, INVITE_LINK_MAX_TTL_MS, INVITE_LINK_TOKEN_GRACE_MS, buildContextGrant, validateContextGrant, validateManifest, validateContextGrantUse, assertDelegationAttenuation, createDelegationLink, verifyDelegationChain, contextGrantAuditPayload, CONTEXT_GRANT_MAX_BYTES, CONTEXT_GRANT_MAX_LIFETIME_MS, CONTEXT_GRANT_DEFAULT_LIFETIME_MS, } from '../../packages/core/dist/index.js';
+export type { RuleInspectionInput, RuleInspectionOptions, RuleInspectionFinding, RuleInspectionReport, RuleInspectionRule, RuleInspectionKind, RuleInspectionDiagnosticCode, KeyPair, Json, Signed, SignedEnvelope, ContextGrant, ContextGrantOptions, DeliveryMode, TaskManifest, ContextGrantAuditEventType, ContextGrantAuditPayload, DelegationLimits, DelegationLinkPayload, DelegationLink, DelegationProof, DelegationAttachment, Invite, AgentSkill, DiscoveryAgentCard, CreateAgentCardOptions, SignedAgentCard, RelayEndpointPolicy, ConnectionRequest, ConnectionAccepted, ConnectionAck, ConnectionControl, InviteLinkKeys, InviteLinkCiphertext, InviteLinkStorage, InviteLinkRelayPolicy, ParsedInviteLink, } from '../../packages/core/dist/index.js';
 export type { RelayTransport } from '../../packages/relay/dist/index.js';
 export { connectionsCommand, connectionHumanReview } from './connections.js';
 export type { ConnectionsCommandOptions } from './connections.js';

package/dist/cli/dist/sdk.js

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: Apache-2.0
 /** Supported embedding surface for sealbridge/sdk. Keep exports explicit. */
-export { InviteStore, KeychainSecretStore, openKeychainSecretStore, FileKeyStore, KeychainKeyStore, inspectStoredIdentity, resolveStoredIdentity, selectKeyStore, keyStoreSelection, keychainService, resolveDataRoot, readApplicationConfig, setApplicationKeyStore, WorkerTrustStore, workerIntakePath, ConnectionService, ConnectionRouter, syncConnections, StoredConnectionExchange, ConnectionAdmissionReview, HeldRequestReview, unavailableHeldContentReviewProvider, AcpMcpServer, buildTaskManifest, appendContextGrantAuditEvent, CONTEXT_GRANT_AUDIT_EVENTS, RequesterClient, WorkerNode, verifyDelegationAttachment, } from '../../packages/runtime/dist/index.js';
-export { generateKeyPair, createSignedAgentCard, verifySignedAgentCard, createInviteToken, inviteTokenFromUri, isInviteTarget, parseAndVerifyInviteToken, discoverAgentCards, findDiscoveredAgentCard, generateInviteLinkKey, deriveInviteLinkKeys, inviteLinkClaimTag, inviteLinkAad, padInviteLinkToken, unpadInviteLinkToken, encryptInviteLink, decryptInviteLink, packInviteLinkCiphertext, unpackInviteLinkCiphertext, parseInviteLink, inviteLinkExpiry, inviteLinkVerificationNumber, INVITE_LINK_CONTEXT, INVITE_LINK_HKDF_INFO, INVITE_LINK_PAD_BLOCK_BYTES, INVITE_LINK_MAX_PADDED_BYTES, INVITE_LINK_DEFAULT_TTL_MS, INVITE_LINK_MAX_TTL_MS, INVITE_LINK_TOKEN_GRACE_MS, buildContextGrant, validateContextGrant, validateManifest, validateContextGrantUse, assertDelegationAttenuation, createDelegationLink, verifyDelegationChain, contextGrantAuditPayload, CONTEXT_GRANT_MAX_BYTES, CONTEXT_GRANT_MAX_LIFETIME_MS, CONTEXT_GRANT_DEFAULT_LIFETIME_MS, } from '../../packages/core/dist/index.js';
+export { InviteStore, KeychainSecretStore, openKeychainSecretStore, FileKeyStore, KeychainKeyStore, inspectStoredIdentity, resolveStoredIdentity, selectKeyStore, keyStoreSelection, keychainService, resolveDataRoot, readApplicationConfig, setApplicationKeyStore, WorkerTrustStore, workerIntakePath, ConnectionService, ConnectionRouter, syncConnections, StoredConnectionExchange, ConnectionAdmissionReview, HeldRequestReview, unavailableHeldContentReviewProvider, taskContent, createRuleBasedContentReviewProvider, AcpMcpServer, buildTaskManifest, appendContextGrantAuditEvent, CONTEXT_GRANT_AUDIT_EVENTS, RequesterClient, WorkerNode, verifyDelegationAttachment, } from '../../packages/runtime/dist/index.js';
+export { inspectRuleContent, CONTENT_INSPECTION_RULES, CONTENT_INSPECTION_RULESET_VERSION, CONTENT_INSPECTION_RULESET_DIGEST, CONTENT_INSPECTION_LIMITS, generateKeyPair, createSignedAgentCard, verifySignedAgentCard, createInviteToken, inviteTokenFromUri, isInviteTarget, parseAndVerifyInviteToken, discoverAgentCards, findDiscoveredAgentCard, generateInviteLinkKey, deriveInviteLinkKeys, inviteLinkClaimTag, inviteLinkAad, padInviteLinkToken, unpadInviteLinkToken, encryptInviteLink, decryptInviteLink, packInviteLinkCiphertext, unpackInviteLinkCiphertext, parseInviteLink, inviteLinkExpiry, inviteLinkVerificationNumber, INVITE_LINK_CONTEXT, INVITE_LINK_HKDF_INFO, INVITE_LINK_PAD_BLOCK_BYTES, INVITE_LINK_MAX_PADDED_BYTES, INVITE_LINK_DEFAULT_TTL_MS, INVITE_LINK_MAX_TTL_MS, INVITE_LINK_TOKEN_GRACE_MS, buildContextGrant, validateContextGrant, validateManifest, validateContextGrantUse, assertDelegationAttenuation, createDelegationLink, verifyDelegationChain, contextGrantAuditPayload, CONTEXT_GRANT_MAX_BYTES, CONTEXT_GRANT_MAX_LIFETIME_MS, CONTEXT_GRANT_DEFAULT_LIFETIME_MS, } from '../../packages/core/dist/index.js';
 export { connectionsCommand, connectionHumanReview } from './connections.js';
 export { mcpServerCommand, parseMcpServerArgs, mcpServerOptionsFromArgs } from './mcp.js';
 export { parseJsonl, verifyAudit, parseAuditJsonl, verifyAuditEvidence, createAuditInterruption, JsonlStore, MemoryStore, BilateralLedger } from '../../packages/ledger/dist/index.js';

package/dist/cli/dist/sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6EAA6E;AAC7E,OAAO,EACL,WAAW,EAAE,mBAAmB,EAAE,uBAAuB,EACzD,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAC5E,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EACnE,qBAAqB,EAAE,sBAAsB,EAC7C,gBAAgB,EAAE,gBAAgB,EAClC,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,wBAAwB,EAAE,yBAAyB,EACzG,iBAAiB,EAAE,oCAAoC,EACvD,YAAY,EACZ,iBAAiB,EAAE,4BAA4B,EAAE,0BAA0B,EAC3E,eAAe,EAAE,UAAU,EAAE,0BAA0B,GACxD,MAAM,cAAc,CAAC;AAetB,OAAO,EACL,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAC7D,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,yBAAyB,EAChF,kBAAkB,EAAE,uBAAuB,EAC3C,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,aAAa,EAC9E,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAC9E,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,EAAE,gBAAgB,EACvF,4BAA4B,EAC5B,mBAAmB,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,4BAA4B,EACrG,0BAA0B,EAAE,sBAAsB,EAAE,0BAA0B,EAC9E,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,uBAAuB,EAClF,2BAA2B,EAAE,oBAAoB,EAAE,qBAAqB,EACxE,wBAAwB,EAAE,uBAAuB,EAAE,6BAA6B,EAChF,iCAAiC,GAClC,MAAM,WAAW,CAAC;AAWnB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAG1F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAC7F,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6EAA6E;AAC7E,OAAO,EACL,WAAW,EAAE,mBAAmB,EAAE,uBAAuB,EACzD,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,EAC5E,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EACnE,qBAAqB,EAAE,sBAAsB,EAC7C,gBAAgB,EAAE,gBAAgB,EAClC,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,wBAAwB,EAAE,yBAAyB,EACzG,iBAAiB,EAAE,oCAAoC,EAAE,WAAW,EACpE,oCAAoC,EACpC,YAAY,EACZ,iBAAiB,EAAE,4BAA4B,EAAE,0BAA0B,EAC3E,eAAe,EAAE,UAAU,EAAE,0BAA0B,GACxD,MAAM,cAAc,CAAC;AAgBtB,OAAO,EACL,kBAAkB,EAAE,wBAAwB,EAAE,kCAAkC,EAChF,iCAAiC,EAAE,yBAAyB,EAC5D,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAC7D,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,yBAAyB,EAChF,kBAAkB,EAAE,uBAAuB,EAC3C,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,aAAa,EAC9E,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAC9E,wBAAwB,EAAE,0BAA0B,EAAE,eAAe,EAAE,gBAAgB,EACvF,4BAA4B,EAC5B,mBAAmB,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,4BAA4B,EACrG,0BAA0B,EAAE,sBAAsB,EAAE,0BAA0B,EAC9E,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,uBAAuB,EAClF,2BAA2B,EAAE,oBAAoB,EAAE,qBAAqB,EACxE,wBAAwB,EAAE,uBAAuB,EAAE,6BAA6B,EAChF,iCAAiC,GAClC,MAAM,WAAW,CAAC;AAanB,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAG1F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,uBAAuB,EAC7F,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/cli/dist/task-review.d.ts

@@ -1,13 +1,6 @@
-import type { Json, KeyPair, SignedEnvelope, TaskManifest } from '../../packages/core/dist/index.js';
 import type { HeldContentReviewProvider } from '../../packages/runtime/dist/index.js';
+export { taskContent } from '../../packages/runtime/dist/index.js';
 /** JSON is literal owner-facing data. Escape format controls as well as terminal controls. */
 export declare function literalText(value: unknown): string;
-export declare function taskContent(envelope: SignedEnvelope, owner: KeyPair, contentDigest: string): {
-    manifest: TaskManifest;
-    input: Json;
-    capabilityChains: string | number | boolean | Json[] | {
-        [key: string]: Json;
-    };
-};
 /** Completion means validated content was rendered, never that execution was authorized. */
 export declare function cliTaskInspection(output: (text: string) => void | Promise<void>): HeldContentReviewProvider;

package/dist/cli/dist/task-review.js

@@ -1,31 +1,18 @@
 // SPDX-License-Identifier: Apache-2.0
-import { digest, openEnvelope, validateManifest, verifySigned } from '../../packages/core/dist/index.js';
-import { heldContentDigest } from '../../packages/runtime/dist/index.js';
+import { digest } from '../../packages/core/dist/index.js';
+import { taskContent } from '../../packages/runtime/dist/index.js';
+export { taskContent } from '../../packages/runtime/dist/index.js';
 /** JSON is literal owner-facing data. Escape format controls as well as terminal controls. */
 export function literalText(value) {
     return JSON.stringify(value, null, 2).replace(/[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/gu, c => c === '\n' ? c :
         c.split('').map(unit => '\\u' + unit.charCodeAt(0).toString(16).padStart(4, '0')).join(''));
 }
-export function taskContent(envelope, owner, contentDigest) {
-    const body = openEnvelope(envelope, owner);
-    const manifest = body?.proposal?.payload;
-    validateManifest(manifest);
-    if (envelope.payload.eventType !== 'PROPOSE' || envelope.payload.seq !== 0 ||
-        manifest.taskId !== envelope.payload.taskId || manifest.worker?.ownerDid !== owner.did ||
-        manifest.requester.ownerDid !== envelope.payload.senderDid || !verifySigned(body.proposal, manifest.requester.ownerDid) ||
-        heldContentDigest('task', body) !== contentDigest)
-        throw new Error('INVALID_PROPOSAL');
-    // Transport credentials and invitations are not task content.
-    return { manifest, input: body.input, capabilityChains: body.capabilityChains ?? [] };
-}
 /** Completion means validated content was rendered, never that execution was authorized. */
 export function cliTaskInspection(output) {
     return { async inspect(envelope, context, signal) {
             if (context.kind !== 'task' || signal.aborted)
                 throw new Error('INSPECTION_INCOMPLETE');
-            const content = taskContent(envelope, context.owner, context.contentDigest);
-            if (digest(envelope) !== context.envelopeDigest)
-                throw new Error('INVALID_PROPOSAL');
+            const content = taskContent(envelope, context.owner, context.contentDigest, context.envelopeDigest);
             await output(literalText({ heldId: context.recordId, ...content }));
             if (signal.aborted)
                 throw new Error('INSPECTION_INCOMPLETE');

package/dist/cli/dist/task-review.js.map

@@ -1 +1 @@
-{"version":3,"file":"task-review.js","sourceRoot":"","sources":["../src/task-review.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAwB,EAAE,KAAc,EAAE,aAAqB;IACzF,MAAM,IAAI,GAAG,YAAY,CAAO,QAAQ,EAAE,KAAK,CAE9C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;IACzC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACtE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC,GAAG;QACtF,QAAQ,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;QACvH,iBAAiB,CAAC,MAAM,EAAE,IAAuB,CAAC,KAAK,aAAa;QACtE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,8DAA8D;IAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;AACxF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,MAA8C;IAC9E,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM;YAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACrF,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC7D,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc;gBAC9F,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU;gBACxD,YAAY,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;QACnG,CAAC,EAAE,CAAC;AACN,CAAC"}
+{"version":3,"file":"task-review.js","sourceRoot":"","sources":["../src/task-review.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,MAA8C;IAC9E,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM;YAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACxF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YACpG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC7D,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc;gBAC9F,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU;gBACxD,YAAY,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;QACnG,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/cli/dist/tasks.js

@@ -49,7 +49,7 @@ export async function tasksCommand(args, options = {}) {
     // A cached receipt cannot stand in for display during this owner operation.
     if (held.inspectionStatus === 'complete') {
         const record = review.store.read(held.id);
-        await output(literalText({ heldId: held.id, ...taskContent(record.envelope, key, held.contentDigest) }));
+        await output(literalText({ heldId: held.id, ...taskContent(record.envelope, key, held.contentDigest, record.envelopeDigest) }));
     }
     else if ((await review.inspect(held.id)).inspectionStatus !== 'complete')
         throw new Error('INSPECTION_INCOMPLETE');

package/dist/cli/dist/tasks.js.map

@@ -1 +1 @@
-{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../src/tasks.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEtI,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/E,MAAM,KAAK,GAAG,ozBAAozB,CAAC;AAEn0B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc,EAAE,UAG/C,EAAE;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACpF,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,GAAa,EAAE,EAAE,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5F,MAAM,GAAG,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAA8B,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/F,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1J,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC/E,4EAA4E;IAC5E,IAAI,IAAI,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3G,CAAC;SAAM,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrH,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO;IAC9B,IAAI,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;QAChF,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,cAAc;QACzD,MAAM,EAAE,0HAA0H,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;QACtJ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,0FAA0F;IAC1F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK;QAC5F,iBAAiB,EAAE,MAAM,KAAK,SAAS,EAAE,QAAQ,EAAE,oGAAoG,EAAE,CAAC,CAAC,CAAC;AAChK,CAAC"}
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../src/tasks.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEtI,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/E,MAAM,KAAK,GAAG,ozBAAozB,CAAC;AAEn0B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc,EAAE,UAG/C,EAAE;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACpF,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,GAAa,EAAE,EAAE,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACzD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YACxG,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;IAC7C,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,eAAe,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5F,MAAM,GAAG,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAA8B,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/F,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1J,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC/E,4EAA4E;IAC5E,IAAI,IAAI,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;QAC3C,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAClI,CAAC;SAAM,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrH,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO;IAC9B,IAAI,CAAC,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;QAChF,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,cAAc;QACzD,MAAM,EAAE,0HAA0H,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;QACtJ,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,0FAA0F;IAC1F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK;QAC5F,iBAAiB,EAAE,MAAM,KAAK,SAAS,EAAE,QAAQ,EAAE,oGAAoG,EAAE,CAAC,CAAC,CAAC;AAChK,CAAC"}

package/dist/package.json

@@ -1 +1 @@
-{"type":"module","version":"0.5.0"}
+{"type":"module","version":"0.6.0"}

package/dist/packages/core/dist/content-inspection-rules.d.ts

@@ -0,0 +1,22 @@
+export type RuleInspectionKind = 'size' | 'format' | 'invisible_text' | 'injection' | 'url' | 'secret_request' | 'secret_present' | 'executable';
+export interface RuleInspectionRule {
+    readonly id: string;
+    readonly kind: RuleInspectionKind;
+    readonly severity: 'info' | 'warn' | 'block';
+    readonly detector: 'bounds' | 'unicode' | 'phrase' | 'url' | 'secret' | 'code' | 'base64';
+    readonly noteCode: string;
+    readonly pattern?: string;
+    readonly flags?: string;
+    readonly terms?: readonly string[];
+}
+export declare const CONTENT_INSPECTION_LIMITS: Readonly<{
+    maxBytes: number;
+    maxDepth: 32;
+    maxNodes: 100000;
+    maxStringLength: number;
+    maxFindings: 100;
+    maxDecodedBytes: number;
+}>;
+export declare const CONTENT_INSPECTION_RULESET_VERSION = "1.0.0";
+export declare const CONTENT_INSPECTION_RULES: readonly RuleInspectionRule[];
+export declare const CONTENT_INSPECTION_RULESET_DIGEST: string;

package/dist/packages/core/dist/content-inspection-rules.js

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest } from './crypto.js';
+export const CONTENT_INSPECTION_LIMITS = Object.freeze({
+    maxBytes: 256 * 1024, maxDepth: 32, maxNodes: 100_000, maxStringLength: 64 * 1024,
+    maxFindings: 100, maxDecodedBytes: 64 * 1024,
+});
+export const CONTENT_INSPECTION_RULESET_VERSION = '1.0.0';
+// Descriptors and detector implementation are versioned together. No caller-supplied rules.
+const descriptors = [
+    { id: 'bounds', kind: 'size', severity: 'block', detector: 'bounds', noteCode: 'CONTENT_BOUND' },
+    { id: 'format', kind: 'format', severity: 'block', detector: 'bounds', noteCode: 'JSON_FORMAT' },
+    { id: 'unicode', kind: 'invisible_text', severity: 'warn', detector: 'unicode', noteCode: 'INVISIBLE_TEXT',
+        pattern: '[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f-\\u009f\\u00ad\\u061c\\u180e\\u200b-\\u200f\\u202a-\\u202e\\u2060-\\u206f\\ufeff\\u{e0000}-\\u{e007f}]', flags: 'gu' },
+    { id: 'instruction-phrases', kind: 'injection', severity: 'warn', detector: 'phrase', noteCode: 'INSTRUCTION_PHRASE',
+        pattern: 'ignore\\s+(?:all\\s+)?previous\\s+instructions|system\\s+prompt|以前の指示を無視|あなたは今から', flags: 'giu' },
+    { id: 'url', kind: 'url', severity: 'warn', detector: 'url', noteCode: 'URL_FORM',
+        pattern: '(?:[a-z][a-z0-9+.-]*://|(?:https?|ftp|file|mailto|tel|ssh|wss?|data|javascript):|www\\.)[^\\s<>"\\x60]+', flags: 'giu',
+        terms: ['bit.ly', 't.co', 'tinyurl.com', 'goo.gl', 'is.gd', 'buff.ly', 'ow.ly'] },
+    { id: 'secret-request', kind: 'secret_request', severity: 'warn', detector: 'secret', noteCode: 'SECRET_REQUEST',
+        pattern: 'api[ _-]?(?:key|キー)|\\.env\\b|~?/\\.ssh\\b|id_rsa|token|password|トークン|パスワード|秘密鍵|認証情報', flags: 'giu',
+        terms: ['send', 'paste', 'disclose', 'share', 'reveal', 'upload', '送', '貼', '開示', '教え', '共有'] },
+    { id: 'secret-present', kind: 'secret_present', severity: 'warn', detector: 'secret', noteCode: 'SECRET_FORM',
+        pattern: '-----BEGIN (?:RSA |EC |OPENSSH |DSA |ENCRYPTED )?PRIVATE KEY-----|(?:AKIA|ASIA)[A-Z0-9]{16}\\b|gh[pousr]_[A-Za-z0-9]{36,255}\\b|github_pat_[A-Za-z0-9_]{22,255}\\b|npm_[A-Za-z0-9]{36}\\b|sk-(?:proj-)?[A-Za-z0-9_-]{20,255}\\b', flags: 'gu' },
+    { id: 'code', kind: 'executable', severity: 'warn', detector: 'code', noteCode: 'CODE_FORM',
+        pattern: '^#![^\\r\\n]+|```|<script\\b|\\b(?:bash|sh|zsh)\\s+(?:-c\\b|[^\\s]+\\.sh\\b)|\\b(?:powershell|pwsh)(?:\\.exe)?\\s+-|\\b(?:Invoke-Expression|Start-Process)\\b|\\b(?:curl|wget)\\b[^\\r\\n|]{0,256}\\|\\s*(?:ba)?sh\\b', flags: 'gimu' },
+    { id: 'base64', kind: 'executable', severity: 'warn', detector: 'base64', noteCode: 'BASE64_FORM',
+        pattern: '(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{80,}={0,2}(?![A-Za-z0-9+/=])', flags: 'gu' },
+    { id: 'binary-magic', kind: 'executable', severity: 'block', detector: 'base64', noteCode: 'BINARY_OR_ARCHIVE' },
+];
+export const CONTENT_INSPECTION_RULES = Object.freeze(descriptors.map(rule => Object.freeze({ ...rule, ...(rule.terms ? { terms: Object.freeze([...rule.terms]) } : {}) })));
+export const CONTENT_INSPECTION_RULESET_DIGEST = digest({
+    detectorVersion: CONTENT_INSPECTION_RULESET_VERSION, rules: CONTENT_INSPECTION_RULES, limits: CONTENT_INSPECTION_LIMITS,
+});
+//# sourceMappingURL=content-inspection-rules.js.map

package/dist/packages/core/dist/content-inspection-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-inspection-rules.js","sourceRoot":"","sources":["../src/content-inspection-rules.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAcrC,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,GAAG,IAAI;IACjF,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,IAAI;CAC7C,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAC1D,4FAA4F;AAC5F,MAAM,WAAW,GAAyB;IACxC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE;IAChG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE;IAChG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB;QACxG,OAAO,EAAE,6JAA6J,EAAE,KAAK,EAAE,IAAI,EAAE;IACvL,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB;QAClH,OAAO,EAAE,kFAAkF,EAAE,KAAK,EAAE,KAAK,EAAE;IAC7G,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU;QAC/E,OAAO,EAAE,yGAAyG,EAAE,KAAK,EAAE,KAAK;QAChI,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;IACnF,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB;QAC9G,OAAO,EAAE,sFAAsF,EAAE,KAAK,EAAE,KAAK;QAC7G,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IACjG,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa;QAC3G,OAAO,EAAE,iOAAiO,EAAE,KAAK,EAAE,IAAI,EAAE;IAC3P,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW;QACzF,OAAO,EAAE,uNAAuN,EAAE,KAAK,EAAE,MAAM,EAAE;IACnP,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa;QAC/F,OAAO,EAAE,8DAA8D,EAAE,KAAK,EAAE,IAAI,EAAE;IACxF,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE;CACjH,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAkC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAC1G,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC;IACtD,eAAe,EAAE,kCAAkC,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,yBAAyB;CACxH,CAAC,CAAC"}

package/dist/packages/core/dist/content-inspection.d.ts

@@ -0,0 +1,43 @@
+import type { Json, TaskManifest } from './types.js';
+import type { RuleInspectionKind } from './content-inspection-rules.js';
+export interface RuleInspectionInput {
+    manifest: TaskManifest;
+    input: Json;
+    capabilityChains?: Json;
+}
+export interface RuleInspectionOptions {
+    maxBytes?: number;
+    maxDepth?: number;
+    maxNodes?: number;
+    maxStringLength?: number;
+    maxFindings?: number;
+    maxDecodedBytes?: number;
+}
+export interface RuleInspectionFinding {
+    ruleId: string;
+    kind: RuleInspectionKind;
+    severity: 'info' | 'warn' | 'block';
+    location?: {
+        path: string;
+        start?: number;
+        end?: number;
+    };
+    noteCode: string;
+}
+export type RuleInspectionDiagnosticCode = 'LIMIT_EXCEEDED' | 'ABORTED' | 'TIMEOUT' | 'INVALID_CONTENT' | 'INSPECTOR_FAILED';
+export interface RuleInspectionReport {
+    inspectorId: 'rules';
+    inspectorVersion: string;
+    rulesetDigest: string;
+    contentDigest: string;
+    sizeBytes: number;
+    limits: Required<RuleInspectionOptions>;
+    status: 'ok' | 'error';
+    verdict: 'pass' | 'warn' | 'block' | 'error';
+    findings: RuleInspectionFinding[];
+    diagnostics: {
+        code: RuleInspectionDiagnosticCode;
+    }[];
+}
+/** Offline heuristic inspection. Limits are local and may only be lowered. Content is never executed. */
+export declare function inspectRuleContent(content: RuleInspectionInput, options?: RuleInspectionOptions, signal?: AbortSignal): Promise<RuleInspectionReport>;

package/dist/packages/core/dist/content-inspection.js

@@ -0,0 +1,192 @@
+// SPDX-License-Identifier: Apache-2.0
+import { digest } from './crypto.js';
+import { validateManifest } from './schema.js';
+import { CONTENT_INSPECTION_LIMITS, CONTENT_INSPECTION_RULES, CONTENT_INSPECTION_RULESET_DIGEST, CONTENT_INSPECTION_RULESET_VERSION } from './content-inspection-rules.js';
+const pointer = (segment) => segment.replace(/~/gu, '~0').replace(/\//gu, '~1');
+// Ordinary pointer keys locate content; keys containing potential evidence use a fixed marker.
+function pathSegment(key) {
+    const redact = key.length > 80 || /[\p{C}]|[a-z][a-z0-9+.-]*:|api.?key|token|password|secret|\.env|\.ssh|id_rsa|パスワード|トークン|秘密/iu.test(key) ||
+        CONTENT_INSPECTION_RULES.some(rule => rule.pattern && new RegExp(rule.pattern, rule.flags).test(key));
+    return pointer(redact ? '[redacted]' : key);
+}
+function binaryMagic(bytes) {
+    const hex = bytes.subarray(0, 8).toString('hex');
+    return ['4d5a', '7f454c46', 'cafebabe', 'cefaedfe', 'cffaedfe', 'feedface', 'feedfacf',
+        '504b0304', '504b0506', '504b0708', '1f8b', '377abcaf271c', '526172211a07', '425a68', 'fd377a585a00', '0061736d']
+        .some(magic => hex.startsWith(magic)) || bytes.subarray(257, 262).toString('ascii') === 'ustar';
+}
+/** Offline heuristic inspection. Limits are local and may only be lowered. Content is never executed. */
+export async function inspectRuleContent(content, options = {}, signal) {
+    const limits = { ...CONTENT_INSPECTION_LIMITS };
+    const findings = [];
+    let sizeBytes = 0, nodes = 0, decodedBytes = 0;
+    let contentDigest = digest(null);
+    let failure;
+    const stop = (code) => { throw code; };
+    const checkAbort = () => { if (signal?.aborted)
+        stop('ABORTED'); };
+    const addBytes = (bytes) => { sizeBytes += bytes; if (sizeBytes > limits.maxBytes)
+        stop('LIMIT_EXCEEDED'); };
+    const add = (rule, path, start, end) => {
+        if (findings.length >= limits.maxFindings)
+            stop('LIMIT_EXCEEDED');
+        findings.push({ ruleId: rule.id, kind: rule.kind, severity: rule.severity, noteCode: rule.noteCode,
+            ...(path === undefined ? {} : { location: { path, ...(start === undefined ? {} : { start, end }) } }) });
+    };
+    const seen = new Set();
+    const strings = [];
+    const count = async () => {
+        checkAbort();
+        if (++nodes > limits.maxNodes)
+            stop('LIMIT_EXCEEDED');
+        if (nodes % 256 === 0) {
+            await new Promise(resolve => setImmediate(resolve));
+            checkAbort();
+        }
+    };
+    const string = (value, path, order) => {
+        if (/[\uD800-\uDFFF]/u.test(value))
+            stop('INVALID_CONTENT');
+        if (Buffer.byteLength(value) > limits.maxStringLength)
+            stop('LIMIT_EXCEEDED');
+        addBytes(Buffer.byteLength(JSON.stringify(value)));
+        strings.push({ value, path, order });
+    };
+    // Validate JSON without invoking accessors/toJSON, then hash only the bounded snapshot.
+    async function visit(value, path, depth, order = '') {
+        await count();
+        if (depth > limits.maxDepth)
+            stop('LIMIT_EXCEEDED');
+        if (typeof value === 'string') {
+            string(value, path, order);
+            return value;
+        }
+        if (value === null || typeof value === 'boolean' || typeof value === 'number' && Number.isFinite(value)) {
+            addBytes(Buffer.byteLength(JSON.stringify(value)));
+            return value;
+        }
+        if (!value || typeof value !== 'object' || seen.has(value))
+            return stop('INVALID_CONTENT');
+        const array = Array.isArray(value);
+        if (!array && Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null)
+            return stop('INVALID_CONTENT');
+        seen.add(value);
+        const keys = Reflect.ownKeys(value);
+        if (keys.some(key => typeof key !== 'string'))
+            return stop('INVALID_CONTENT');
+        if (keys.length > limits.maxNodes - nodes + (array ? 1 : 0))
+            return stop('LIMIT_EXCEEDED');
+        const result = array ? [] : Object.create(null);
+        const ordered = array ? keys.filter(key => key !== 'length') : keys.sort((a, b) => pointer(a) < pointer(b) ? -1 : pointer(a) > pointer(b) ? 1 : 0);
+        if (array && ordered.length !== value.length)
+            return stop('INVALID_CONTENT');
+        addBytes(2);
+        for (let i = 0; i < ordered.length; i++) {
+            const key = ordered[i];
+            if (array && key !== String(i))
+                return stop('INVALID_CONTENT');
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (!descriptor.enumerable || !Object.hasOwn(descriptor, 'value'))
+                return stop('INVALID_CONTENT');
+            if (i)
+                addBytes(1);
+            const nextPath = path + '/' + pathSegment(key);
+            const nextOrder = order + '/' + pointer(key);
+            if (!array) {
+                await count();
+                string(key, nextPath, nextOrder);
+                addBytes(1);
+            }
+            const item = await visit(descriptor.value, nextPath, depth + 1, nextOrder);
+            if (array)
+                result.push(item);
+            else
+                result[key] = item;
+        }
+        seen.delete(value);
+        return result;
+    }
+    try {
+        checkAbort();
+        if (!options || typeof options !== 'object' || Object.keys(options).some(key => !Object.hasOwn(limits, key)))
+            stop('INVALID_CONTENT');
+        for (const key of Object.keys(limits)) {
+            const value = options[key];
+            if (value !== undefined) {
+                if (!Number.isSafeInteger(value) || value < 1 || value > CONTENT_INSPECTION_LIMITS[key])
+                    stop('INVALID_CONTENT');
+                limits[key] = value;
+            }
+        }
+        const snapshot = await visit(content, '', 0);
+        if (!snapshot || typeof snapshot !== 'object' || !Object.hasOwn(snapshot, 'manifest') || !Object.hasOwn(snapshot, 'input') ||
+            Object.keys(snapshot).some(key => !['manifest', 'input', 'capabilityChains'].includes(key)))
+            stop('INVALID_CONTENT');
+        contentDigest = digest({ manifest: snapshot.manifest, input: snapshot.input });
+        try {
+            validateManifest(snapshot.manifest);
+        }
+        catch {
+            stop('INVALID_CONTENT');
+        }
+        // Arrays also follow lexical JSON Pointer order (10 precedes 2).
+        strings.sort((a, b) => a.order < b.order ? -1 : a.order > b.order ? 1 : 0);
+        for (const { value, path } of strings) {
+            await new Promise(resolve => setImmediate(resolve));
+            checkAbort();
+            for (const rule of CONTENT_INSPECTION_RULES) {
+                if (!rule.pattern)
+                    continue;
+                const regex = new RegExp(rule.pattern, rule.flags);
+                for (const match of value.matchAll(regex)) {
+                    checkAbort();
+                    const start = match.index, end = start + match[0].length;
+                    if (rule.detector === 'unicode' && match[0] === '\u200d' &&
+                        /\p{Extended_Pictographic}[\uFE0F\p{Emoji_Modifier}]*$/u.test(value.slice(0, start)) &&
+                        /^\p{Extended_Pictographic}/u.test(value.slice(end)))
+                        continue;
+                    if (rule.id === 'secret-request' && !rule.terms.some(term => value.toLowerCase().includes(term)))
+                        continue;
+                    if (rule.detector === 'url') {
+                        try {
+                            const url = new URL(match[0].startsWith('www.') ? 'https://' + match[0] : match[0]);
+                            const host = url.hostname.toLowerCase();
+                            if (url.protocol === 'https:' && !host.includes('xn--') && !/^\[|^\d+(?:\.\d+){3}$/u.test(host) &&
+                                !rule.terms.includes(host.replace(/^www\./u, '')))
+                                continue;
+                        }
+                        catch { /* A recognized URL form that cannot be parsed is still a finding. */ }
+                    }
+                    add(rule, path, start, end);
+                    if (rule.id === 'base64') {
+                        const text = match[0];
+                        const length = Math.floor(text.replace(/=+$/u, '').length * 6 / 8);
+                        if (decodedBytes + length > limits.maxDecodedBytes)
+                            stop('LIMIT_EXCEEDED');
+                        const bytes = Buffer.from(text, 'base64');
+                        decodedBytes += bytes.length;
+                        if (binaryMagic(bytes))
+                            add(CONTENT_INSPECTION_RULES.find(rule => rule.id === 'binary-magic'), path, start, end);
+                    }
+                }
+            }
+        }
+        checkAbort();
+    }
+    catch (code) {
+        failure = ['LIMIT_EXCEEDED', 'ABORTED', 'INVALID_CONTENT'].includes(code)
+            ? code : 'INSPECTOR_FAILED';
+        if (failure === 'LIMIT_EXCEEDED' || failure === 'INVALID_CONTENT') {
+            // Leave room for the failure finding even when the finding cap was reached.
+            const rule = CONTENT_INSPECTION_RULES.find(rule => rule.id === (failure === 'LIMIT_EXCEEDED' ? 'bounds' : 'format'));
+            if (findings.length >= limits.maxFindings)
+                findings.pop();
+            findings.push({ ruleId: rule.id, kind: rule.kind, severity: rule.severity, noteCode: rule.noteCode });
+        }
+    }
+    return { inspectorId: 'rules', inspectorVersion: CONTENT_INSPECTION_RULESET_VERSION,
+        rulesetDigest: CONTENT_INSPECTION_RULESET_DIGEST, contentDigest, sizeBytes, limits,
+        status: failure ? 'error' : 'ok', verdict: failure ? 'error' : findings.some(f => f.severity === 'block') ? 'block' :
+            findings.some(f => f.severity === 'warn') ? 'warn' : 'pass', findings, diagnostics: failure ? [{ code: failure }] : [] };
+}
+//# sourceMappingURL=content-inspection.js.map

package/dist/packages/core/dist/content-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-inspection.js","sourceRoot":"","sources":["../src/content-inspection.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,iCAAiC,EAC7F,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AAmB5E,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACxF,+FAA+F;AAC/F,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,8FAA8F,CAAC,IAAI,CAAC,GAAG,CAAC;QACxI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QACpF,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC;SAChH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;AACpG,CAAC;AACD,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B,EAAE,UAAiC,EAAE,EAAE,MAAoB;IAC9H,MAAM,MAAM,GAAoC,EAAE,GAAG,yBAAyB,EAAE,CAAC;IACjF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC;IAC/C,IAAI,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAiD,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAkC,EAAS,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,IAAI,MAAM,EAAE,OAAO;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI,SAAS,GAAG,MAAM,CAAC,QAAQ;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,CAAC,IAAwB,EAAE,IAAa,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE;QACpF,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YAChG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAqD,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,UAAU,EAAE,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtD,IAAI,KAAK,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;YAAC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;QAAC,CAAC;IACrG,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE;QAC5D,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,eAAe;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9E,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC;IACF,wFAAwF;IACxF,KAAK,UAAU,KAAK,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QAC1E,MAAM,KAAK,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAC5E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;YACtG,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAqC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAa,CAAC,CAAC,CAAE,IAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1G,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC7E,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;YAChE,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClG,IAAI,CAAC;gBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,GAAG,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YAC3E,IAAI,KAAK;gBAAG,MAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;gBAAO,MAAkC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtI,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAoC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACjH,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAmC,CAAC;QAC/E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;YACxH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvH,aAAa,GAAG,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC;YAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QAC/E,iEAAiE;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,UAAU,EAAE,CAAC;YACxE,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAC5B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1C,UAAU,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAM,EAAE,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;oBAC1D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;wBACtD,wDAAwD,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;wBACpF,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAAE,SAAS;oBACjE,IAAI,IAAI,CAAC,EAAE,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;wBAAE,SAAS;oBAC5G,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAC5B,IAAI,CAAC;4BACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;4BACpF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;4BACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;gCAC7F,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gCAAE,SAAS;wBACjE,CAAC;wBAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;oBACnF,CAAC;oBACD,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC5B,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;wBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBACnE,IAAI,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC,eAAe;4BAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;wBAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;wBACxE,IAAI,WAAW,CAAC,KAAK,CAAC;4BAAE,GAAG,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,cAAc,CAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;oBACpH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,UAAU,EAAE,CAAC;IACf,CAAC;IAAC,OAAO,IAAI,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAc,CAAC;YACjF,CAAC,CAAC,IAAoC,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9D,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAClE,4EAA4E;YAC5E,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAE,CAAC;YACtH,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,kCAAkC;QACjF,aAAa,EAAE,iCAAiC,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM;QAClF,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnH,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/H,CAAC"}

package/dist/packages/core/dist/index.d.ts

@@ -14,3 +14,5 @@ export * from './relay-auth.js';
 export * from './revocation.js';
 export * from './delivery-status.js';
 export * from './delegation.js';
+export * from './content-inspection.js';
+export * from './content-inspection-rules.js';

package/dist/packages/core/dist/index.js

@@ -14,4 +14,6 @@ export * from './relay-auth.js';
 export * from './revocation.js';
 export * from './delivery-status.js';
 export * from './delegation.js';
+export * from './content-inspection.js';
+export * from './content-inspection-rules.js';
 //# sourceMappingURL=index.js.map

package/dist/packages/core/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC"}

package/dist/packages/runtime/dist/a2a.js

@@ -7,7 +7,7 @@ export function agentCard(name, url) {
         name,
         description: 'Sealbridge owner gateway',
         supportedInterfaces: [{ url, protocolBinding: 'JSONRPC', protocolVersion: A2A_PROTOCOL_VERSION }],
-        version: '0.5.0',
+        version: '0.6.0',
         capabilities: { streaming: false },
         defaultInputModes: ['application/json'],
         defaultOutputModes: ['application/json'],