signafaide 0.2.1 → 0.3.0

package/dist/{core-BMfko_ex.d.cts → core-BTJGPYVW.d.ts}

@@ -300,6 +300,62 @@ declare class Client {
 /** GET a JSON document (used for `--keys <url>`). */
 declare function fetchJson(url: string, timeoutMs?: number): Promise<any>;
 
+/**
+ * Tool declarations (SPEC §2.6) and the coverage they give (§7): which of an agent's tools are
+ * recorded, read from envelopes alone (kind, name, seq), so it holds for hash-only records.
+ * Pure: no I/O. The same names, rules and wording as the Rust core and the Python SDK.
+ *
+ * Coverage is a note, never a failure, and never a claim of completeness: a declaration is the
+ * client's own signed statement of the tools the agent has.
+ */
+/** The name of the note that starts a new tool declaration for the agent's chain. */
+declare const TOOLS = "signafaide.tools";
+/** `signafaide.tool/<tool name>`: the agent has this tool and calls to it are recorded. */
+declare const TOOL_PREFIX = "signafaide.tool/";
+/** `signafaide.tool_unrecorded/<tool name>`: the agent has this tool and calls to it are not recorded. */
+declare const TOOL_UNRECORDED_PREFIX = "signafaide.tool_unrecorded/";
+/** The longest tool name a declaration holds as it is, in characters (Unicode code points): an
+ * envelope name is at most 128 and the longer prefix takes 27. */
+declare const MAX_DECLARED_NAME = 101;
+/** A tool's name as a declaration holds it: the name itself when it has at most 101 characters,
+ * else its first 92 characters, `~`, and the first 8 hex characters of sha256(UTF-8 tool name).
+ * A name that is already short maps to itself. */
+declare function declaredName(tool: string): string;
+/** The envelope name of the note that declares `tool`. */
+declare function toolNoteName(tool: string, recorded: boolean): string;
+/** What a record says about the agent's tool list, from its kind and name alone: `"header"`,
+ * a tool, or null when it is not a tool-declaration note. */
+declare function toolNote(kind: unknown, name: unknown): "header" | {
+    name: string;
+    recorded: boolean;
+} | null;
+interface DeclaredTool {
+    name: string;
+    recorded: boolean;
+}
+/** What one agent's records show about its tools (§7 tool coverage). */
+interface Coverage {
+    /** The tools of the agent's current declaration, in name order; empty when there is none. */
+    declared: DeclaredTool[];
+    /** The names of decision records that are not in the current declaration, in name order. */
+    undeclared_recorded: string[];
+    /** The seq of the `signafaide.tools` note that starts the current declaration, or null. */
+    declared_at_seq: number | null;
+}
+/** The coverage of one agent's records, given in seq order. The current declaration is the one
+ * started by the last `signafaide.tools` note; tool notes before the first such note belong to a
+ * declaration the records do not hold and are ignored. Inside a declaration a later note for the
+ * same tool replaces an earlier one. A `decision` counts as a recorded tool unless its name
+ * starts with `signafaide.`; it is compared by its declared name. */
+declare function coverage(records: Iterable<{
+    seq: number;
+    kind: unknown;
+    name: unknown;
+}>): Coverage;
+/** The coverage of `agent` in words (§7), one line each: what was declared, then the recorded
+ * tools the declaration does not list. */
+declare function coverageLines(agent: string, c: Coverage): string[];
+
 declare const MAX_PROOF_BYTES = 65536;
 declare const MAX_NODES = 1024;
 type Attestation = ({
@@ -460,6 +516,9 @@ declare class Report {
     notSent: number;
     /** The project's name from the signed export statement, when the pack has one. */
     projectName: string | null;
+    /** Tool coverage per agent (§7; per chain for local state): the agent's current tool
+     * declaration and the recorded tools it does not list. A note, never a failure. */
+    coverage: Record<string, Coverage>;
     constructor(checks: Check[], project?: string | null, env?: string | null, records?: number, warnings?: string[], notes?: string[], independent?: {
         service_keys: boolean;
         agent_keys: boolean;
@@ -471,6 +530,9 @@ declare class Report {
     get result(): "PASS" | "FAIL" | "BLOCKED";
     check(id: CheckId): Check;
     firstFailed(): CheckId | null;
+    /** Tool coverage in words (§7), agent by agent: what each agent declared, then the recorded
+     * tools its declaration does not list. */
+    coverageLines(): string[];
     lines(): string[];
     toString(): string;
     toJSON(): object;
@@ -585,6 +647,6 @@ declare function clientHeader(opts?: {
     env?: Env;
 }): string;
 
-declare const VERSION = "0.2.1";
+declare const VERSION = "0.3.0";
 
-export { countsText as $, type AgentKeyEntry as A, type BlockHeader as B, Client as C, DEFAULT_TIMESTAMP_URL as D, type Envelope as E, b64urlDecode as F, blockAttestations as G, HEADER as H, blockHeader as I, JsonNumber as J, type Kind as K, type LocalContent as L, MAX_NODES as M, NOT_INDEPENDENT as N, canonicalBytes as O, type PackFilter as P, canonicalize as Q, type Receipt as R, SigningKey as S, checkContent as T, checkHeader as U, VERSION as V, checkRoundTime as W, clampTime as X, clientHeader as Y, contentFromText as Z, contentHash as _, type SignedRecord as a, detectAgent as a0, draftErrors as a1, envelopeErrors as a2, exportStatement as a3, fetchJson as a4, hashJson as a5, isLoopbackUrl as a6, keyEntryErrors as a7, keyId as a8, leafHash as a9, signedMessage as aA, target as aB, telemetryEnabled as aC, timestampHeights as aD, validProjectId as aE, validTime as aF, verifyInclusion as aG, verifyLocalState as aH, verifyPack as aI, verifySig as aJ, wireRecord as aK, withWallTime as aL, loadDrandVerifier as aa, lookupTimestamps as ab, makeDraft as ac, makeRecord as ad, manifestEntry as ae, manifestErrors as af, merkleRoot as ag, newSalt as ah, now as ai, otsStatus as aj, parseAgentKeys as ak, parseHeadFile as al, parseJson as am, parseOts as an, parseServiceKeys as ao, receiptErrors as ap, recordErrors as aq, recordHash as ar, recordsHash as as, registration as at, resultLine as au, rootsFromVector as av, scopeText as aw, serviceKeysHash as ax, sha256Hex as ay, signDraft as az, SignafaideError as b, Report as c, type KeyDoc as d, AGENT_RE as e, ANCHOR_WINDOW_MS as f, type BlockRoots as g, CHECKS as h, type Check as i, type CheckId as j, DEFAULT_URL as k, type Domain as l, type DrandBeacon as m, type DrandVerifier as n, type KeySource as o, KeysRequired as p, MAX_PROOF_BYTES as q, MAX_ROUND as r, type PackOptions as s, type RecordFields as t, type SignedHeadDoc as u, type Status as v, agentName as w, assertPortableNumbers as x, auditPath as y, b64url as z };
+export { checkHeader as $, type AgentKeyEntry as A, type BlockHeader as B, Client as C, DEFAULT_TIMESTAMP_URL as D, type Envelope as E, TOOL_UNRECORDED_PREFIX as F, agentName as G, HEADER as H, assertPortableNumbers as I, JsonNumber as J, type Kind as K, type LocalContent as L, MAX_DECLARED_NAME as M, NOT_INDEPENDENT as N, auditPath as O, type PackFilter as P, b64url as Q, type Receipt as R, SigningKey as S, TOOLS as T, b64urlDecode as U, VERSION as V, blockAttestations as W, blockHeader as X, canonicalBytes as Y, canonicalize as Z, checkContent as _, type SignedRecord as a, checkRoundTime as a0, clampTime as a1, clientHeader as a2, contentFromText as a3, contentHash as a4, countsText as a5, coverage as a6, coverageLines as a7, declaredName as a8, detectAgent as a9, recordHash as aA, recordsHash as aB, registration as aC, resultLine as aD, rootsFromVector as aE, scopeText as aF, serviceKeysHash as aG, sha256Hex as aH, signDraft as aI, signedMessage as aJ, target as aK, telemetryEnabled as aL, timestampHeights as aM, toolNote as aN, toolNoteName as aO, validProjectId as aP, validTime as aQ, verifyInclusion as aR, verifyLocalState as aS, verifyPack as aT, verifySig as aU, wireRecord as aV, withWallTime as aW, draftErrors as aa, envelopeErrors as ab, exportStatement as ac, fetchJson as ad, hashJson as ae, isLoopbackUrl as af, keyEntryErrors as ag, keyId as ah, leafHash as ai, loadDrandVerifier as aj, lookupTimestamps as ak, makeDraft as al, makeRecord as am, manifestEntry as an, manifestErrors as ao, merkleRoot as ap, newSalt as aq, now as ar, otsStatus as as, parseAgentKeys as at, parseHeadFile as au, parseJson as av, parseOts as aw, parseServiceKeys as ax, receiptErrors as ay, recordErrors as az, SignafaideError as b, Report as c, type KeyDoc as d, AGENT_RE as e, ANCHOR_WINDOW_MS as f, type BlockRoots as g, CHECKS as h, type Check as i, type CheckId as j, type Coverage as k, DEFAULT_URL as l, type DeclaredTool as m, type Domain as n, type DrandBeacon as o, type DrandVerifier as p, type KeySource as q, KeysRequired as r, MAX_NODES as s, MAX_PROOF_BYTES as t, MAX_ROUND as u, type PackOptions as v, type RecordFields as w, type SignedHeadDoc as x, type Status as y, TOOL_PREFIX as z };

package/dist/core.cjs

@@ -38,6 +38,7 @@ __export(core_exports, {
   HEADER: () => HEADER,
   JsonNumber: () => JsonNumber,
   KeysRequired: () => KeysRequired,
+  MAX_DECLARED_NAME: () => MAX_DECLARED_NAME,
   MAX_NODES: () => MAX_NODES,
   MAX_PROOF_BYTES: () => MAX_PROOF_BYTES,
   MAX_ROUND: () => MAX_ROUND,
@@ -45,6 +46,9 @@ __export(core_exports, {
   Report: () => Report,
   SignafaideError: () => SignafaideError,
   SigningKey: () => SigningKey,
+  TOOLS: () => TOOLS,
+  TOOL_PREFIX: () => TOOL_PREFIX,
+  TOOL_UNRECORDED_PREFIX: () => TOOL_UNRECORDED_PREFIX,
   VERSION: () => VERSION,
   agentName: () => agentName,
   assertPortableNumbers: () => assertPortableNumbers,
@@ -62,6 +66,9 @@ __export(core_exports, {
   contentFromText: () => contentFromText,
   contentHash: () => contentHash,
   countsText: () => countsText,
+  coverage: () => coverage,
+  coverageLines: () => coverageLines,
+  declaredName: () => declaredName,
   detectAgent: () => detectAgent,
   draftErrors: () => draftErrors,
   envelopeErrors: () => envelopeErrors,
@@ -101,6 +108,8 @@ __export(core_exports, {
   target: () => target,
   telemetryEnabled: () => telemetryEnabled,
   timestampHeights: () => timestampHeights,
+  toolNote: () => toolNote,
+  toolNoteName: () => toolNoteName,
   validProjectId: () => validProjectId,
   validTime: () => validTime,
   verifyInclusion: () => verifyInclusion,
@@ -1110,7 +1119,7 @@ function manifestErrors(doc) {
 }
 
 // src/version.ts
-var VERSION = "0.2.1";
+var VERSION = "0.3.0";
 
 // src/telemetry.ts
 var HEADER = "X-Signafaide-Client";
@@ -1279,6 +1288,72 @@ async function fetchJson(url, timeoutMs = 1e4) {
   return new Client(u.origin, void 0, timeoutMs, `signafaide-js/${VERSION}`).request("GET", u.pathname + u.search, { auth: false });
 }
 
+// src/plural.ts
+var plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+
+// src/coverage.ts
+var TOOLS = "signafaide.tools";
+var TOOL_PREFIX = "signafaide.tool/";
+var TOOL_UNRECORDED_PREFIX = "signafaide.tool_unrecorded/";
+var RESERVED_PREFIX = "signafaide.";
+var MAX_DECLARED_NAME = 101;
+var KEPT = MAX_DECLARED_NAME - 9;
+function declaredName(tool) {
+  const chars = [...tool];
+  if (chars.length <= MAX_DECLARED_NAME) return tool;
+  return `${chars.slice(0, KEPT).join("")}~${sha256Hex(new TextEncoder().encode(tool)).slice(0, 8)}`;
+}
+function toolNoteName(tool, recorded) {
+  return (recorded ? TOOL_PREFIX : TOOL_UNRECORDED_PREFIX) + declaredName(tool);
+}
+function toolNote(kind, name) {
+  if (kind !== "note" || typeof name !== "string") return null;
+  if (name === TOOLS) return "header";
+  const recorded = name.startsWith(TOOL_PREFIX);
+  if (!recorded && !name.startsWith(TOOL_UNRECORDED_PREFIX)) return null;
+  const rest = name.slice((recorded ? TOOL_PREFIX : TOOL_UNRECORDED_PREFIX).length);
+  return rest ? { name: rest, recorded } : null;
+}
+function byCodePoint(a, b) {
+  const [x, y] = [[...a], [...b]];
+  for (let i = 0; i < x.length && i < y.length; i++) {
+    const d = x[i].codePointAt(0) - y[i].codePointAt(0);
+    if (d) return d;
+  }
+  return x.length - y.length;
+}
+function coverage(records) {
+  let at = null;
+  let tools = /* @__PURE__ */ new Map();
+  const called = /* @__PURE__ */ new Set();
+  for (const { seq, kind, name } of records) {
+    const t = toolNote(kind, name);
+    if (t === "header") {
+      at = seq;
+      tools = /* @__PURE__ */ new Map();
+    } else if (t) {
+      if (at !== null) tools.set(t.name, t.recorded);
+    } else if (kind === "decision" && typeof name === "string" && !name.startsWith(RESERVED_PREFIX)) called.add(declaredName(name));
+  }
+  if (at === null) return { declared: [], undeclared_recorded: [], declared_at_seq: null };
+  return {
+    declared: [...tools.keys()].sort(byCodePoint).map((name) => ({ name, recorded: tools.get(name) })),
+    undeclared_recorded: [...called].filter((n) => !tools.has(n)).sort(byCodePoint),
+    declared_at_seq: at
+  };
+}
+var countIs = (n, one) => `${plural(n, one)} ${n === 1 ? "is" : "are"}`;
+function coverageLines(agent, c) {
+  if (c.declared_at_seq === null) return [`${agent}: no tool list was declared, so the pack cannot show which of the agent's tools are recorded`];
+  const unrecorded = c.declared.filter((t) => !t.recorded).map((t) => t.name);
+  const out = [];
+  if (!c.declared.length) out.push(`${agent}: the declared tool list is empty`);
+  else if (!unrecorded.length) out.push(`${agent}: ${c.declared.length === 1 ? "the" : "all"} ${countIs(c.declared.length, "declared tool")} recorded`);
+  else out.push(`${agent}: ${countIs(unrecorded.length, "declared tool")} not recorded: ${unrecorded.join(", ")}`);
+  if (c.undeclared_recorded.length) out.push(`${agent}: ${countIs(c.undeclared_recorded.length, "recorded tool")} not in the declared tool list: ${c.undeclared_recorded.join(", ")}`);
+  return out;
+}
+
 // src/ots.ts
 var import_legacy = require("@noble/hashes/legacy");
 var import_sha22 = require("@noble/hashes/sha2");
@@ -1463,11 +1538,6 @@ function rootsFromVector(m) {
 
 // src/verifier.ts
 var import_utils4 = require("@noble/hashes/utils");
-
-// src/plural.ts
-var plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
-
-// src/verifier.ts
 var CHECKS = [
   ["schema", "Envelope schema"],
   ["record_hash", "Record hashes"],
@@ -1596,6 +1666,9 @@ var Report = class {
   notSent = 0;
   /** The project's name from the signed export statement, when the pack has one. */
   projectName = null;
+  /** Tool coverage per agent (§7; per chain for local state): the agent's current tool
+   * declaration and the recorded tools it does not list. A note, never a failure. */
+  coverage = {};
   /** e.g. `PASS: export of every agent, all records, generated <t>`, or
    * `PASS (agent keys taken from the pack, not independent): export of ...` (§7). */
   get resultLine() {
@@ -1619,6 +1692,11 @@ var Report = class {
   firstFailed() {
     return this.checks.find((c) => c.status === "fail")?.id ?? null;
   }
+  /** Tool coverage in words (§7), agent by agent: what each agent declared, then the recorded
+   * tools its declaration does not list. */
+  coverageLines() {
+    return Object.entries(this.coverage).flatMap(([agent, c]) => coverageLines(agent, c));
+  }
   lines() {
     const out = [...this.notes];
     if (this.project && this.env) {
@@ -1634,6 +1712,7 @@ var Report = class {
       if (c.failures.length > 20) out.push(`      ... and ${c.failures.length - 20} more`);
     }
     if (this.checks.some((c) => c.status === "pending")) out.push(PENDING_MEANS);
+    out.push(...this.coverageLines().map((l) => `coverage: ${l}`));
     out.push(...this.after);
     out.push(...this.blocked.map((b) => `BLOCKED ${b}`));
     out.push(this.resultLine);
@@ -1656,6 +1735,7 @@ var Report = class {
       independent: this.independent,
       notes: this.notes,
       checks: this.checks,
+      coverage: this.coverage,
       ...this.after.length ? { not_yet: this.after } : {},
       ...this.blocked.length ? { blocked: this.blocked } : {}
     };
@@ -1784,6 +1864,7 @@ function verifyPack(pack, serviceKeys, opts = {}) {
     byService
   });
   report.projectName = typeof pack.project_name === "string" ? pack.project_name : null;
+  report.coverage = v.coverage;
   return report;
 }
 function earliest(a, b) {
@@ -1797,6 +1878,7 @@ function verifyLocalState(local, serviceKeys, drand = null, serviceKeysPlainHttp
   const checks = v.run(local.records, [], local.chainIds);
   const report = new Report(checks, null, null, local.records.length, [], [], { service_keys: !serviceKeysPlainHttp, agent_keys: true });
   report.nothingCosigned = v.nothingCosigned;
+  report.coverage = v.coverage;
   return report;
 }
 var isU64 = (x) => typeof x === "number" && Number.isInteger(x) && x >= 0;
@@ -1927,6 +2009,8 @@ var Verifier = class {
   firstKey = /* @__PURE__ */ new Map();
   drafts = 0;
   nothingCosigned = false;
+  /** Tool coverage per chain (§7), filled by `run`. */
+  coverage = {};
   /** Local state: chain id -> the witness's signed head a chain continues after (§8). */
   localBases = {};
   /** A chain may start after seq 1 only when the export's from is after the agent's first key. */
@@ -2113,6 +2197,11 @@ var Verifier = class {
     if (starts.length) acc.notes.push(`${INSTANCE_NOTE}: ${starts.join(", ")}`);
     if (clean.length) acc.notes.push(`${CLEAN_RESTART_NOTE}: ${clean.join(", ")}`);
     if (based.length) acc.notes.push(`continues after a co-signed record this machine does not hold: ${based.join(", ")} (the witness's signed head, see signed heads)`);
+    for (const agent of [...chains.keys()].sort()) {
+      const chain = chains.get(agent);
+      const seqs = [...chain.keys()].sort((x, y) => x - y);
+      this.coverage[agent] = coverage(seqs.map((seq) => ({ seq, kind: chain.get(seq).r.envelope.kind, name: chain.get(seq).r.envelope.name })));
+    }
     return chains;
   }
   // 5
@@ -2534,6 +2623,7 @@ async function loadDrandVerifier() {
   HEADER,
   JsonNumber,
   KeysRequired,
+  MAX_DECLARED_NAME,
   MAX_NODES,
   MAX_PROOF_BYTES,
   MAX_ROUND,
@@ -2541,6 +2631,9 @@ async function loadDrandVerifier() {
   Report,
   SignafaideError,
   SigningKey,
+  TOOLS,
+  TOOL_PREFIX,
+  TOOL_UNRECORDED_PREFIX,
   VERSION,
   agentName,
   assertPortableNumbers,
@@ -2558,6 +2651,9 @@ async function loadDrandVerifier() {
   contentFromText,
   contentHash,
   countsText,
+  coverage,
+  coverageLines,
+  declaredName,
   detectAgent,
   draftErrors,
   envelopeErrors,
@@ -2597,6 +2693,8 @@ async function loadDrandVerifier() {
   target,
   telemetryEnabled,
   timestampHeights,
+  toolNote,
+  toolNoteName,
   validProjectId,
   validTime,
   verifyInclusion,

package/dist/core.d.cts

@@ -1 +1 @@
-export { e as AGENT_RE, f as ANCHOR_WINDOW_MS, A as AgentKeyEntry, B as BlockHeader, g as BlockRoots, h as CHECKS, i as Check, j as CheckId, C as Client, k as DEFAULT_URL, l as Domain, m as DrandBeacon, n as DrandVerifier, E as Envelope, H as HEADER, J as JsonNumber, d as KeyDoc, o as KeySource, p as KeysRequired, K as Kind, M as MAX_NODES, q as MAX_PROOF_BYTES, r as MAX_ROUND, N as NOT_INDEPENDENT, P as PackFilter, s as PackOptions, R as Receipt, t as RecordFields, c as Report, b as SignafaideError, u as SignedHeadDoc, a as SignedRecord, S as SigningKey, v as Status, V as VERSION, w as agentName, x as assertPortableNumbers, y as auditPath, z as b64url, F as b64urlDecode, G as blockAttestations, O as canonicalBytes, Q as canonicalize, T as checkContent, U as checkHeader, W as checkRoundTime, X as clampTime, Y as clientHeader, Z as contentFromText, _ as contentHash, $ as countsText, a0 as detectAgent, a1 as draftErrors, a2 as envelopeErrors, a3 as exportStatement, a4 as fetchJson, a5 as hashJson, a6 as isLoopbackUrl, a7 as keyEntryErrors, a8 as keyId, a9 as leafHash, aa as loadDrandVerifier, ac as makeDraft, ad as makeRecord, ae as manifestEntry, af as manifestErrors, ag as merkleRoot, ah as newSalt, ai as now, aj as otsStatus, ak as parseAgentKeys, al as parseHeadFile, am as parseJson, an as parseOts, ao as parseServiceKeys, ap as receiptErrors, aq as recordErrors, ar as recordHash, as as recordsHash, at as registration, au as resultLine, av as rootsFromVector, aw as scopeText, ax as serviceKeysHash, ay as sha256Hex, az as signDraft, aA as signedMessage, aB as target, aC as telemetryEnabled, aD as timestampHeights, aE as validProjectId, aF as validTime, aG as verifyInclusion, aH as verifyLocalState, aI as verifyPack, aJ as verifySig, aK as wireRecord, aL as withWallTime } from './core-BMfko_ex.cjs';
+export { e as AGENT_RE, f as ANCHOR_WINDOW_MS, A as AgentKeyEntry, B as BlockHeader, g as BlockRoots, h as CHECKS, i as Check, j as CheckId, C as Client, k as Coverage, l as DEFAULT_URL, m as DeclaredTool, n as Domain, o as DrandBeacon, p as DrandVerifier, E as Envelope, H as HEADER, J as JsonNumber, d as KeyDoc, q as KeySource, r as KeysRequired, K as Kind, M as MAX_DECLARED_NAME, s as MAX_NODES, t as MAX_PROOF_BYTES, u as MAX_ROUND, N as NOT_INDEPENDENT, P as PackFilter, v as PackOptions, R as Receipt, w as RecordFields, c as Report, b as SignafaideError, x as SignedHeadDoc, a as SignedRecord, S as SigningKey, y as Status, T as TOOLS, z as TOOL_PREFIX, F as TOOL_UNRECORDED_PREFIX, V as VERSION, G as agentName, I as assertPortableNumbers, O as auditPath, Q as b64url, U as b64urlDecode, W as blockAttestations, Y as canonicalBytes, Z as canonicalize, _ as checkContent, $ as checkHeader, a0 as checkRoundTime, a1 as clampTime, a2 as clientHeader, a3 as contentFromText, a4 as contentHash, a5 as countsText, a6 as coverage, a7 as coverageLines, a8 as declaredName, a9 as detectAgent, aa as draftErrors, ab as envelopeErrors, ac as exportStatement, ad as fetchJson, ae as hashJson, af as isLoopbackUrl, ag as keyEntryErrors, ah as keyId, ai as leafHash, aj as loadDrandVerifier, al as makeDraft, am as makeRecord, an as manifestEntry, ao as manifestErrors, ap as merkleRoot, aq as newSalt, ar as now, as as otsStatus, at as parseAgentKeys, au as parseHeadFile, av as parseJson, aw as parseOts, ax as parseServiceKeys, ay as receiptErrors, az as recordErrors, aA as recordHash, aB as recordsHash, aC as registration, aD as resultLine, aE as rootsFromVector, aF as scopeText, aG as serviceKeysHash, aH as sha256Hex, aI as signDraft, aJ as signedMessage, aK as target, aL as telemetryEnabled, aM as timestampHeights, aN as toolNote, aO as toolNoteName, aP as validProjectId, aQ as validTime, aR as verifyInclusion, aS as verifyLocalState, aT as verifyPack, aU as verifySig, aV as wireRecord, aW as withWallTime } from './core-BTJGPYVW.cjs';

package/dist/core.d.ts

@@ -1 +1 @@
-export { e as AGENT_RE, f as ANCHOR_WINDOW_MS, A as AgentKeyEntry, B as BlockHeader, g as BlockRoots, h as CHECKS, i as Check, j as CheckId, C as Client, k as DEFAULT_URL, l as Domain, m as DrandBeacon, n as DrandVerifier, E as Envelope, H as HEADER, J as JsonNumber, d as KeyDoc, o as KeySource, p as KeysRequired, K as Kind, M as MAX_NODES, q as MAX_PROOF_BYTES, r as MAX_ROUND, N as NOT_INDEPENDENT, P as PackFilter, s as PackOptions, R as Receipt, t as RecordFields, c as Report, b as SignafaideError, u as SignedHeadDoc, a as SignedRecord, S as SigningKey, v as Status, V as VERSION, w as agentName, x as assertPortableNumbers, y as auditPath, z as b64url, F as b64urlDecode, G as blockAttestations, O as canonicalBytes, Q as canonicalize, T as checkContent, U as checkHeader, W as checkRoundTime, X as clampTime, Y as clientHeader, Z as contentFromText, _ as contentHash, $ as countsText, a0 as detectAgent, a1 as draftErrors, a2 as envelopeErrors, a3 as exportStatement, a4 as fetchJson, a5 as hashJson, a6 as isLoopbackUrl, a7 as keyEntryErrors, a8 as keyId, a9 as leafHash, aa as loadDrandVerifier, ac as makeDraft, ad as makeRecord, ae as manifestEntry, af as manifestErrors, ag as merkleRoot, ah as newSalt, ai as now, aj as otsStatus, ak as parseAgentKeys, al as parseHeadFile, am as parseJson, an as parseOts, ao as parseServiceKeys, ap as receiptErrors, aq as recordErrors, ar as recordHash, as as recordsHash, at as registration, au as resultLine, av as rootsFromVector, aw as scopeText, ax as serviceKeysHash, ay as sha256Hex, az as signDraft, aA as signedMessage, aB as target, aC as telemetryEnabled, aD as timestampHeights, aE as validProjectId, aF as validTime, aG as verifyInclusion, aH as verifyLocalState, aI as verifyPack, aJ as verifySig, aK as wireRecord, aL as withWallTime } from './core-BMfko_ex.js';
+export { e as AGENT_RE, f as ANCHOR_WINDOW_MS, A as AgentKeyEntry, B as BlockHeader, g as BlockRoots, h as CHECKS, i as Check, j as CheckId, C as Client, k as Coverage, l as DEFAULT_URL, m as DeclaredTool, n as Domain, o as DrandBeacon, p as DrandVerifier, E as Envelope, H as HEADER, J as JsonNumber, d as KeyDoc, q as KeySource, r as KeysRequired, K as Kind, M as MAX_DECLARED_NAME, s as MAX_NODES, t as MAX_PROOF_BYTES, u as MAX_ROUND, N as NOT_INDEPENDENT, P as PackFilter, v as PackOptions, R as Receipt, w as RecordFields, c as Report, b as SignafaideError, x as SignedHeadDoc, a as SignedRecord, S as SigningKey, y as Status, T as TOOLS, z as TOOL_PREFIX, F as TOOL_UNRECORDED_PREFIX, V as VERSION, G as agentName, I as assertPortableNumbers, O as auditPath, Q as b64url, U as b64urlDecode, W as blockAttestations, Y as canonicalBytes, Z as canonicalize, _ as checkContent, $ as checkHeader, a0 as checkRoundTime, a1 as clampTime, a2 as clientHeader, a3 as contentFromText, a4 as contentHash, a5 as countsText, a6 as coverage, a7 as coverageLines, a8 as declaredName, a9 as detectAgent, aa as draftErrors, ab as envelopeErrors, ac as exportStatement, ad as fetchJson, ae as hashJson, af as isLoopbackUrl, ag as keyEntryErrors, ah as keyId, ai as leafHash, aj as loadDrandVerifier, al as makeDraft, am as makeRecord, an as manifestEntry, ao as manifestErrors, ap as merkleRoot, aq as newSalt, ar as now, as as otsStatus, at as parseAgentKeys, au as parseHeadFile, av as parseJson, aw as parseOts, ax as parseServiceKeys, ay as receiptErrors, az as recordErrors, aA as recordHash, aB as recordsHash, aC as registration, aD as resultLine, aE as rootsFromVector, aF as scopeText, aG as serviceKeysHash, aH as sha256Hex, aI as signDraft, aJ as signedMessage, aK as target, aL as telemetryEnabled, aM as timestampHeights, aN as toolNote, aO as toolNoteName, aP as validProjectId, aQ as validTime, aR as verifyInclusion, aS as verifyLocalState, aT as verifyPack, aU as verifySig, aV as wireRecord, aW as withWallTime } from './core-BTJGPYVW.js';

package/dist/core.js

@@ -4,12 +4,16 @@ import {
   CHECKS,
   JsonNumber,
   KeysRequired,
+  MAX_DECLARED_NAME,
   MAX_NODES,
   MAX_PROOF_BYTES,
   MAX_ROUND,
   NOT_INDEPENDENT,
   Report,
   SigningKey,
+  TOOLS,
+  TOOL_PREFIX,
+  TOOL_UNRECORDED_PREFIX,
   agentName,
   assertPortableNumbers,
   auditPath,
@@ -25,6 +29,9 @@ import {
   contentFromText,
   contentHash,
   countsText,
+  coverage,
+  coverageLines,
+  declaredName,
   draftErrors,
   envelopeErrors,
   exportStatement,
@@ -61,6 +68,8 @@ import {
   signedMessage,
   target,
   timestampHeights,
+  toolNote,
+  toolNoteName,
   validProjectId,
   validTime,
   verifyInclusion,
@@ -69,7 +78,7 @@ import {
   verifySig,
   wireRecord,
   withWallTime
-} from "./chunk-MBXHRQ2J.js";
+} from "./chunk-6UDL5LZL.js";
 import {
   Client,
   DEFAULT_URL,
@@ -80,7 +89,7 @@ import {
   detectAgent,
   fetchJson,
   telemetryEnabled
-} from "./chunk-S2RSID5F.js";
+} from "./chunk-DRRRZNIH.js";
 export {
   AGENT_RE,
   ANCHOR_WINDOW_MS,
@@ -90,6 +99,7 @@ export {
   HEADER,
   JsonNumber,
   KeysRequired,
+  MAX_DECLARED_NAME,
   MAX_NODES,
   MAX_PROOF_BYTES,
   MAX_ROUND,
@@ -97,6 +107,9 @@ export {
   Report,
   SignafaideError,
   SigningKey,
+  TOOLS,
+  TOOL_PREFIX,
+  TOOL_UNRECORDED_PREFIX,
   VERSION,
   agentName,
   assertPortableNumbers,
@@ -114,6 +127,9 @@ export {
   contentFromText,
   contentHash,
   countsText,
+  coverage,
+  coverageLines,
+  declaredName,
   detectAgent,
   draftErrors,
   envelopeErrors,
@@ -153,6 +169,8 @@ export {
   target,
   telemetryEnabled,
   timestampHeights,
+  toolNote,
+  toolNoteName,
   validProjectId,
   validTime,
   verifyInclusion,

package/dist/{http-YWG535HP.js → http-BZI6VZM3.js}

@@ -5,7 +5,7 @@ import {
   SignafaideError,
   fetchJson,
   fetchTransport
-} from "./chunk-S2RSID5F.js";
+} from "./chunk-DRRRZNIH.js";
 export {
   Client,
   DEFAULT_URL,