@affiant/core 0.1.0-alpha.0

package/dist/gate/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/gate/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA+HvE,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAmC,EACnC,SAAoB,EACpB,GAAgB,EAChB,IAAqB;IAErB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACxD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpC,8EAA8E;QAC9E,iFAAiF;QACjF,oDAAoD;QACpD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;QAC3D,MAAM,IAAI,GAAG;YACX,OAAO;YACP,MAAM;YACN,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,oBAAoB,EAAE,IAAI;SAClB,CAAC;QAEX,IAAI,OAAO,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;YAC5C,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QACvD,CAAC;QAED,gFAAgF;QAChF,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,MAAM,GACV,SAAS,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAClE,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,2BAA2B;gBAChF,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,oCAAoC;gBACpF,2EAA2E,CAAC;YAC9E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACtF,OAAO;gBACL,GAAG,IAAI;gBACP,WAAW,EAAE,sBAAsB;gBACnC,YAAY,EAAE,eAAe;gBAC7B,MAAM;gBACN,oBAAoB,EAAE,OAAO;aAC9B,CAAC;QACJ,CAAC;QAED,QAAQ;QACR,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,GACV,0CAA0C,OAAO,CAAC,MAAM,QAAQ;gBAChE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,OAAO,CAAC,MAAM,wBAAwB;gBACpF,2BAA2B,CAAC;YAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE;gBACxB,MAAM;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,IAAI;gBACP,WAAW,EAAE,sBAAsB;gBACnC,YAAY,EAAE,eAAe;gBAC7B,MAAM;gBACN,YAAY,EAAE,OAAO;aACtB,CAAC;QACJ,CAAC;QAED,QAAQ;QACR,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,YAAY,CACpB,gBAAgB,EAChB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,yCAAyC;oBAChF,mFAAmF;oBACnF,gFAAgF;oBAChF,wEAAwE,EAC1E,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,MAAM,MAAM,GACV,+BAA+B,MAAM,CAAC,KAAK,CAAC,iCAAiC;oBAC7E,aAAa,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,6BAA6B,CAAC;gBACtE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE;oBACxB,MAAM;oBACN,IAAI,EAAE,sBAAsB;oBAC5B,KAAK;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC,CAAC;gBACH,OAAO;oBACL,GAAG,IAAI;oBACP,WAAW,EAAE,sBAAsB;oBACnC,YAAY,EAAE,eAAe;oBAC7B,MAAM;oBACN,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IACnD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;QAChD,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,sBAAsB;QACnC,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,IAAI;QAClB,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,WAAW,CACxB,IAAqB,EACrB,MAAsB,EACtB,SAAoB,EACpB,GAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACvC,MAAM,MAAM,GACV,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,SAAS,CAAC,KAAK,CAAC,IAAI;YACvF,yFAAyF;YACzF,uEAAuE,CAAC;QAC1E,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE;YAC/C,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,SAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAmB,MAAM,CAAC,cAAc,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3C,IAAI,YAAY,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAoB;IACvD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,SAAS;QACjC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QAC1D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,YAAY,CAAC,IAAqB,EAAE,MAAsB,EAAE,OAAgB;IACnF,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAClB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC;YAC1E,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,kBAAkB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;QAC/E,MAAM,IAAI,UAAU,CAClB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,6BAA6B;YACpE,GAAG,OAAO,CAAC,WAAW,8DAA8D;YACpF,8DAA8D,CACjE,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,MAAgC,EAChC,KAAc;IAEd,OAAO,CACL,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,oBAAoB;QAC7F,2FAA2F;QAC3F,6FAA6F;QAC7F,4EAA4E,CAC7E,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CACjB,IAAqB,EACrB,MAAsB,EACtB,MAAgC,EAChC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO;IACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5D,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE;QAC/C,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;KACrB,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CACxB,IAAqB,EACrB,MAAsB,EACtB,MAA6C,EAC7C,MAAc;IAEd,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;QACnB,GAAG,EAAE,gBAAgB;QACrB,EAAE,EAAE,IAAI,CAAC,GAAG;QACZ,UAAU,EAAE;YACV,WAAW,EAAE,MAAM,CAAC,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,MAAM;YACN,MAAM;SACP;KACF,CAAC,CAAC;AACL,CAAC;AAED,kEAAkE;AAClE,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAYD,oFAAoF;AACpF,SAAS,WAAW,CAClB,IAAqB,EACrB,MAAsB,EACtB,MAQC;IAED,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;QACnB,GAAG,EAAE,wBAAwB;QAC7B,EAAE,EAAE,IAAI,CAAC,GAAG;QACZ,UAAU,EAAE;YACV,WAAW,EAAE,MAAM,CAAC,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,gBAAgB,EAAE,MAAM,CAAC,IAAI;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,kBAAkB,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YACxC,mBAAmB,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC1C,qEAAqE;YACrE,qDAAqD;YACrD,kCAAkC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI;YACrE,YAAY,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;YAClC,gBAAgB,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SAC3C;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/gate/wrap.d.ts

@@ -0,0 +1,107 @@
+/**
+ * The interception seam: what a host wraps a tool with, and what the model gets back.
+ *
+ * **Rules served: GT-6** (a write tool can only produce a proposal — the gate never
+ * calls its `execute`), **CV-4** (a write-capable tool in an uncovered category is
+ * refused here, at wire-up, unless the host declared it), **CV-1** (the refusal is at
+ * wire-up and there is no option that turns the gate off), **GT-2** (the turn context
+ * is a parameter of `wrap` and of every `execute` call path; nothing is ambient),
+ * **AF-5** (a tool call returns one of three things: a proposal, a read result, or an
+ * error).
+ *
+ * ## Why the write path never calls `execute`
+ *
+ * The gated `execute` for a write-capable tool does not hold a reference to the
+ * original function at all: it builds the {@link Operation} from
+ * {@link ToolDefinition.operation}, runs the pipeline, and returns the entry and its
+ * card. There is no branch in which the host's write runs, no option that restores
+ * it, and nothing for a mistake to fall through to. That is GT-6 made structural
+ * rather than documentary — a spy on the original `execute` records nothing, and a
+ * fixture can prove it.
+ *
+ * What this cannot cover is a tool that opens its own connection and writes inside
+ * its body: no wire-up check can see that, and GT-6 states the limit rather than
+ * pretending to enforce it.
+ *
+ * ## Why the context is bound at `wrap`
+ *
+ * `wrap(tool, ctx)` returns a gated tool for *that turn*. The context is a parameter,
+ * captured in this closure, and two turns wrapping the same tool definition get two
+ * independent gated tools that share nothing (GT-2). A read tool's own `execute` is
+ * then called with the same context as its second argument, so the explicitness
+ * survives to the bottom of the call path rather than stopping at the seam.
+ *
+ * @packageDocumentation
+ */
+import type { TurnContext } from "../context.js";
+import type { DocketStatus } from "../docket/entry.js";
+import type { ErrorCode } from "../errors.js";
+import type { ToolDefinition } from "./coverage.js";
+import type { EvidenceCardRequest, PipelineDeps } from "./pipeline.js";
+/**
+ * The three things a gated tool call can produce (AF-5).
+ *
+ * A `"write"` is a **proposal**, never a completed write: an entry id, the status the
+ * row reads at, and the card a person is shown. A model reading this result learns
+ * that the write is pending or that a Standing Order approved it — never that it
+ * happened, because the gate does not execute (AZ-7).
+ *
+ * An `"error"` carries the refusal in a form a model can act on: a substance refusal
+ * (GT-3) says the proposal swore to nothing, and a coverage refusal (CV-4) says the
+ * tool is not one the gate can stand in front of.
+ */
+export type GatedToolResult<TResult> = {
+    /** A write proposal was filed. */
+    readonly kind: "write";
+    /** The Docket entry the proposal was filed under. */
+    readonly entryId: string;
+    /** What the row reads at — `"pending"` unless a Standing Order fired (AZ-1). */
+    readonly status: DocketStatus;
+    /** The Evidence Card the host delivers to a reviewer. */
+    readonly card: EvidenceCardRequest;
+} | {
+    /** A read tool ran and returned its own result. */
+    readonly kind: "read";
+    /** Whatever the tool returned, untouched. */
+    readonly result: TResult;
+} | {
+    /** The call did not produce a proposal or a result. */
+    readonly kind: "error";
+    /** The refusal's code, or `"tool-error"` when a read tool's own body threw. */
+    readonly code: ErrorCode | "tool-error";
+    /** What went wrong, in one line. */
+    readonly message: string;
+};
+/** A tool with the gate in front of it, bound to one turn (GT-2). */
+export interface GatedTool<TArgs, TResult> {
+    /** The wrapped tool's name, unchanged — a model sees the same tool it always did. */
+    readonly name: string;
+    /** The wrapped tool's description, unchanged. */
+    readonly description: string;
+    /** Whether a call to this tool would write. */
+    readonly writeCapable: boolean;
+    /**
+     * Call the tool. A write-capable tool produces a proposal and **never** runs the
+     * host's `execute` (GT-6); a read tool passes straight through to its own.
+     */
+    execute(args: TArgs): Promise<GatedToolResult<TResult>>;
+}
+/**
+ * Put the gate in front of `tool` for the turn `ctx` describes.
+ *
+ * Wire-up refuses three things, all before a single call is made (CV-1):
+ *
+ * - a **write-capable** tool the gate cannot intercept and the host has not declared
+ *   uncovered — `AffiantError("coverage-refused")`, naming the category (CV-4);
+ * - a write-capable tool with no {@link ToolDefinition.operation}, because nothing
+ *   else in this package can know what its arguments propose;
+ * - a read tool with no `execute`, which is a tool that cannot be called at all.
+ *
+ * A write tool the host *has* declared uncovered is wrapped and returns proposals like
+ * any other; the pipeline files each one `blocked` (CV-4). The declaration converts a
+ * start-up refusal into a Docket record — it never turns the gate off.
+ *
+ * @throws AffiantError `"coverage-refused"` or `"wireup-invalid"`.
+ */
+export declare function wrapTool<TArgs, TResult>(tool: ToolDefinition<TArgs, TResult>, ctx: TurnContext, deps: PipelineDeps): GatedTool<TArgs, TResult>;
+//# sourceMappingURL=wrap.d.ts.map

package/dist/gate/wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../src/gate/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAI9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAOvE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,CAAC,OAAO,IAC/B;IACE,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,GACD;IACE,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B,GACD;IACE,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,YAAY,CAAC;IACxC,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,qEAAqE;AACrE,MAAM,WAAW,SAAS,CAAC,KAAK,EAAE,OAAO;IACvC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;CACzD;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EACrC,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,EACpC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,YAAY,GACjB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAkH3B"}

package/dist/gate/wrap.js

@@ -0,0 +1,164 @@
+/**
+ * The interception seam: what a host wraps a tool with, and what the model gets back.
+ *
+ * **Rules served: GT-6** (a write tool can only produce a proposal — the gate never
+ * calls its `execute`), **CV-4** (a write-capable tool in an uncovered category is
+ * refused here, at wire-up, unless the host declared it), **CV-1** (the refusal is at
+ * wire-up and there is no option that turns the gate off), **GT-2** (the turn context
+ * is a parameter of `wrap` and of every `execute` call path; nothing is ambient),
+ * **AF-5** (a tool call returns one of three things: a proposal, a read result, or an
+ * error).
+ *
+ * ## Why the write path never calls `execute`
+ *
+ * The gated `execute` for a write-capable tool does not hold a reference to the
+ * original function at all: it builds the {@link Operation} from
+ * {@link ToolDefinition.operation}, runs the pipeline, and returns the entry and its
+ * card. There is no branch in which the host's write runs, no option that restores
+ * it, and nothing for a mistake to fall through to. That is GT-6 made structural
+ * rather than documentary — a spy on the original `execute` records nothing, and a
+ * fixture can prove it.
+ *
+ * What this cannot cover is a tool that opens its own connection and writes inside
+ * its body: no wire-up check can see that, and GT-6 states the limit rather than
+ * pretending to enforce it.
+ *
+ * ## Why the context is bound at `wrap`
+ *
+ * `wrap(tool, ctx)` returns a gated tool for *that turn*. The context is a parameter,
+ * captured in this closure, and two turns wrapping the same tool definition get two
+ * independent gated tools that share nothing (GT-2). A read tool's own `execute` is
+ * then called with the same context as its second argument, so the explicitness
+ * survives to the bottom of the call path rather than stopping at the seam.
+ *
+ * @packageDocumentation
+ */
+import { AffiantError, isAffiantError } from "../errors.js";
+import { assessCoverage } from "./coverage.js";
+import { runPipeline } from "./pipeline.js";
+// ---------------------------------------------------------------------------
+// Wire-up
+// ---------------------------------------------------------------------------
+/**
+ * Put the gate in front of `tool` for the turn `ctx` describes.
+ *
+ * Wire-up refuses three things, all before a single call is made (CV-1):
+ *
+ * - a **write-capable** tool the gate cannot intercept and the host has not declared
+ *   uncovered — `AffiantError("coverage-refused")`, naming the category (CV-4);
+ * - a write-capable tool with no {@link ToolDefinition.operation}, because nothing
+ *   else in this package can know what its arguments propose;
+ * - a read tool with no `execute`, which is a tool that cannot be called at all.
+ *
+ * A write tool the host *has* declared uncovered is wrapped and returns proposals like
+ * any other; the pipeline files each one `blocked` (CV-4). The declaration converts a
+ * start-up refusal into a Docket record — it never turns the gate off.
+ *
+ * @throws AffiantError `"coverage-refused"` or `"wireup-invalid"`.
+ */
+export function wrapTool(tool, ctx, deps) {
+    // Captured once, per wrap. Read from nowhere else, ever (GT-2).
+    const turn = ctx;
+    if (!tool.writeCapable) {
+        const run = tool.execute;
+        if (typeof run !== "function") {
+            throw new AffiantError("wireup-invalid", `CV-1: read tool ${JSON.stringify(tool.name)} declares no \`execute\`; there is ` +
+                `nothing to call.`, { toolName: tool.name });
+        }
+        return {
+            name: tool.name,
+            description: tool.description,
+            writeCapable: false,
+            async execute(args) {
+                // The only place a host's own function is called, and it is called with the
+                // same explicit context the seam was given (GT-2).
+                try {
+                    return { kind: "read", result: await run(args, turn) };
+                }
+                catch (error) {
+                    return { kind: "error", code: codeOf(error), message: messageOf(error) };
+                }
+            },
+        };
+    }
+    const assessment = assessCoverage(tool);
+    if (!assessment.covered && deps.coverage.lookup(tool.name) === null) {
+        deps.telemetry.emit({
+            key: "coverage.refused",
+            at: deps.clock.now(),
+            attributes: {
+                "gen_ai.tool.name": tool.name,
+                "coverage.category": assessment.category,
+                phase: "wire-up",
+            },
+        });
+        throw new AffiantError("coverage-refused", `CV-4: write-capable tool ${JSON.stringify(tool.name)} is in an uncovered category ` +
+            `(${assessment.category}) — there is nothing for the gate to intercept, so a write ` +
+            `through it would not be filed. Either make it interceptable, or call ` +
+            `gate.declareUncovered(tool, ${JSON.stringify(assessment.category)}) so every ` +
+            `proposal from it is filed blocked on the Docket. There is no option that turns the ` +
+            `gate off for a tool it covers (CV-1).`, { toolName: tool.name, category: assessment.category });
+    }
+    const toOperation = tool.operation;
+    if (typeof toOperation !== "function") {
+        throw new AffiantError("wireup-invalid", `CV-1: write-capable tool ${JSON.stringify(tool.name)} declares no \`operation\`; a ` +
+            `write tool must say how its arguments become the write being proposed, because ` +
+            `nothing else can know which entity a call is about.`, { toolName: tool.name });
+    }
+    const operationLabel = tool.operationLabel ?? null;
+    return {
+        name: tool.name,
+        description: tool.description,
+        writeCapable: true,
+        // GT-6: the host's own `execute` is not captured on this path and is not
+        // reachable from the closure below. There is no branch that runs the write.
+        async execute(args) {
+            try {
+                const filed = await runPipeline({
+                    operation: toOperation(args),
+                    toolName: tool.name,
+                    schema: tool.inputSchema,
+                    // A model's tool arguments are JSON — that is what a tool call is on
+                    // every transport this gate sits behind. `TArgs` is the tool author's
+                    // own type and `wrap` does not constrain it (an interface would not
+                    // satisfy `JsonValue`'s index signature, and refusing those tools would
+                    // buy nothing), so the value is admitted here. `deriveEntryId` still
+                    // raises a TypeError naming the offending path if a host hands the gate
+                    // something with no canonical form.
+                    args: args,
+                    preparedFields: null,
+                    operationLabel,
+                    supersedes: null,
+                    priorAmendments: null,
+                }, turn, deps);
+                return {
+                    kind: "write",
+                    entryId: filed.entry.entryId,
+                    status: filed.entry.status,
+                    card: filed.card,
+                };
+            }
+            catch (error) {
+                // A refusal is an answer: the model is told the proposal swore to nothing, or
+                // that the tool is uncovered, and can say so. A `RangeError` from a port
+                // contract violation is *not* an answer — it is a host bug, and swallowing it
+                // into a tool result would hide it from the host and leave the model guessing.
+                if (isAffiantError(error)) {
+                    return { kind: "error", code: error.code, message: error.message };
+                }
+                throw error;
+            }
+        },
+    };
+}
+/** The code to report for a throw from a read tool's own body. */
+function codeOf(error) {
+    return isAffiantError(error) ? error.code : "tool-error";
+}
+/** The message to report for a throw, without assuming it was an `Error`. */
+function messageOf(error) {
+    if (error instanceof Error)
+        return error.message;
+    return String(error);
+}
+//# sourceMappingURL=wrap.js.map

package/dist/gate/wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.js","sourceRoot":"","sources":["../../src/gate/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAKH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAI5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA2D5C,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAoC,EACpC,GAAgB,EAChB,IAAkB;IAElB,gEAAgE;IAChE,MAAM,IAAI,GAAG,GAAG,CAAC;IAEjB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,YAAY,CACpB,gBAAgB,EAChB,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;gBAC/E,kBAAkB,EACpB,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CACxB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,KAAK;YACnB,KAAK,CAAC,OAAO,CAAC,IAAW;gBACvB,4EAA4E;gBAC5E,mDAAmD;gBACnD,IAAI,CAAC;oBACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3E,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAClB,GAAG,EAAE,kBAAkB;YACvB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,UAAU,EAAE;gBACV,kBAAkB,EAAE,IAAI,CAAC,IAAI;gBAC7B,mBAAmB,EAAE,UAAU,CAAC,QAAQ;gBACxC,KAAK,EAAE,SAAS;aACjB;SACF,CAAC,CAAC;QACH,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B;YAClF,IAAI,UAAU,CAAC,QAAQ,6DAA6D;YACpF,uEAAuE;YACvE,+BAA+B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa;YAC/E,qFAAqF;YACrF,uCAAuC,EACzC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;IACnC,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CACpB,gBAAgB,EAChB,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC;YACnF,iFAAiF;YACjF,qDAAqD,EACvD,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI;QAElB,yEAAyE;QACzE,4EAA4E;QAC5E,KAAK,CAAC,OAAO,CAAC,IAAW;YACvB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B;oBACE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC;oBAC5B,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,MAAM,EAAE,IAAI,CAAC,WAAW;oBACxB,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,wEAAwE;oBACxE,qEAAqE;oBACrE,wEAAwE;oBACxE,oCAAoC;oBACpC,IAAI,EAAE,IAAiB;oBACvB,cAAc,EAAE,IAAI;oBACpB,cAAc;oBACd,UAAU,EAAE,IAAI;oBAChB,eAAe,EAAE,IAAI;iBACtB,EACD,IAAI,EACJ,IAAI,CACL,CAAC;gBACF,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;oBAC5B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;oBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,8EAA8E;gBAC9E,yEAAyE;gBACzE,8EAA8E;gBAC9E,+EAA+E;gBAC/E,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBACrE,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,95 @@
+/**
+ * `@affiant/core` — the Affiant gate for TypeScript.
+ *
+ * Affiant turns every database write an LLM agent proposes into an **Affidavit**:
+ * a per-field evidence record carrying the proposed value, the value it replaces,
+ * where each value came from and how confident the producer is. An Affidavit is
+ * filed as a **Docket** entry and shown to a person as an **Evidence Card**, which
+ * they approve, amend or reject before the host commits anything. A **Standing
+ * Order** is a policy verdict that approves a write with no person present.
+ *
+ * This package is the gate itself. It is held equivalent to the .NET
+ * implementation by the rulebook at
+ * {@link https://github.com/Sakwala/affiant-protocol}: numbered invariants and a
+ * shared conformance fixture suite that both implementations run.
+ *
+ * **What this package does not contain, by rule:** a model client, a risk-scoring
+ * formula, an executor, a transport and a production store. Each is a port the host
+ * supplies (see `ports.ts`), which is what lets one gate sit in front of any model,
+ * any database and any approval surface.
+ *
+ * **What is here at `0.1.0-alpha.0`:** the turn context (GT-2), the port
+ * interfaces, the error-code registry (CV-1), the telemetry-key registry (TL-1) and
+ * the Affidavit model — the provenance ladder with its bindings and merge rule
+ * (PV-1..PV-3, PV-5), the Affidavit and its three confidence numbers (AF-1..AF-3),
+ * and amendment semantics with the recompute they force (DK-2, AF-4); the Docket —
+ * the entry, the store contract and the in-memory reference stores (DK-1, DK-3,
+ * DK-4, DK-5), the last of these behind `@affiant/core/store-memory`; the canonical
+ * form and its SHA-256 (SR-1, SR-2); and **the gate pipeline** — `createGate`,
+ * `wrap`, the interceptor and inference steps, projection, the substance refusal,
+ * the policy chain with Standing Orders, TTL after policy and filing with the
+ * Standing Order attestation (GT-1, GT-3..GT-6, AZ-1, AZ-4, PV-4, CV-1, CV-4, SR-4);
+ * and **the decision path** — `decide`, `markExecuted`, `resubmit` and `rehydrate` on
+ * the gate: fail-closed tenant-scoped authorization, the three attestation kinds with
+ * a relay's identity mapped to `member-via-relay`, amendments with the recompute they
+ * force, the execution outcome a host reports, resubmission lineage and rehydration
+ * order (AZ-1..AZ-3, AZ-5..AZ-7, DK-1, DK-2, DK-5, AF-4, PV-2).
+ *
+ * Three checks stand between a policy's verdict and a write with no person present, and
+ * each degrades to asking a person rather than refusing: a proposed field marked
+ * mandatory that reads `Empty` (GT-5), a declared provenance input above `Conversation`
+ * pointing at nothing (PV-4), and a host risk score above the policy's threshold (GT-5).
+ *
+ * The fixtures for both v0.1 sequences and the runner that executes them are behind
+ * `@affiant/core/testing`, which a host can point at its own ports.
+ *
+ * **Not on npm.** The version string exists so the conformance driver can pin it.
+ * Publishing waits on two things — a public parity report naming what each
+ * implementation does not yet pass, and a green, merge-blocking TypeScript conformance
+ * driver — and a `prepack` guard enforces the wait rather than documenting it. See the
+ * package README.
+ *
+ * @packageDocumentation
+ */
+/** The version of this package. Not published to npm at this version. */
+export declare const CORE_VERSION = "0.1.0-alpha.0";
+/**
+ * The protocol tag the wire types are pinned to, re-exported from
+ * `@affiant/contract` so a host that only depends on the gate can still assert
+ * which rulebook tag it is speaking.
+ */
+export { PROTOCOL_VERSION } from "@affiant/contract";
+export type { ChannelIdentity, Principal, RelayAssertion, Turn, TurnContext } from "./context.js";
+export { AffiantError, ERROR_CODES, ErrorCode, isAffiantError, isErrorCode } from "./errors.js";
+export type { AffiantErrorDetails } from "./errors.js";
+export { isTelemetryKey, noopTelemetry, TELEMETRY_KEYS, TELEMETRY_REGISTRY_VERSION, } from "./telemetry.js";
+export type { TelemetryAttributes, TelemetryEvent, TelemetryKey, TelemetryKeyEntry, TelemetryPort, } from "./telemetry.js";
+export { AFFIDAVIT_FIELD_KINDS, buildAffidavit, computeConfidence, fromWire, isJsonValue, isMoney, toWire, wireCarryOf, withConfidence, } from "./model/affidavit.js";
+export type { Affidavit, AffidavitField, AffidavitFieldInput, AffidavitFieldKind, AffidavitMeta, ConfidenceNumbers, FromWireStamp, JsonValue, Money, WireCarry, } from "./model/affidavit.js";
+export { amendmentTag, applyAmendments, hasAmendment, resolveAmendments, } from "./model/amendments.js";
+export type { Amendment, AmendmentMap, ResolvedAmendment, ReviewerAct, } from "./model/amendments.js";
+export { BINDING_KINDS, chainOf, determinismRank, emptyTag, isBound, isHonourable, merge, mintConversation, mintInference, mintInferred, mintTag, PROVENANCE_LADDER, requiresBinding, supersede, tagsOf, } from "./model/provenance.js";
+export type { Binding, BindingKind, ComputationConstantRef, ComputationRef, ExternalRef, FormInputRef, InferenceSource, MintInferenceOptions, MintTagOptions, ProvenanceChain, ProvenanceSource, ProvenanceTag, RelayRef, ReviewerActRef, UtteranceSpanRef, } from "./model/provenance.js";
+export { defaultClock } from "./ports.js";
+export type { AuthorizationPort, Clock, FieldInterceptor, FieldSchema, FieldSchemaEntry, InferencePort, InterceptedField, InterceptedFields, InterceptorBinding, Operation, ProjectionPort, RiskScorer, StructuredField, StructuredResult, UtteranceSpan, } from "./ports.js";
+export { BLOCKED_CODES, DOCKET_STATUSES, EXECUTION_OUTCOMES, isTerminal, newEntry, readStatus, REQUIREMENT_KINDS, } from "./docket/entry.js";
+export type { Attestation, AttestationRelay, Attestor, BlockedCode, BlockedMarker, DecisionRecord, DocketEntry, DocketStatus, ExecutionOutcome, Lineage, NewEntryInit, PreservedAmendments, RequirementKind, } from "./docket/entry.js";
+export { compareFilingOrder, instantMs, isDue, remainingMs, requireInstant, } from "./docket/expiry.js";
+export type { Expirable } from "./docket/expiry.js";
+export type { DocketStore, Page, PageResult, PreservedAct, PreserveAmendmentsResult, RecordExecutionResult, RecordSupersessionResult, RetentionPolicy, Scope, SessionStore, TransitionPatch, TransitionResult, } from "./docket/store.js";
+export { applyAmendmentsForCanonical, canonicalHash, canonicalHashEntry, canonicalize, canonicalizeEntry, canonicalJson, canonicalString, canonicalStringEntry, sha256Hex, swornAffidavitOf, } from "./model/canonical.js";
+export type { CanonicalField, CanonicalInput, CanonicalizeOptions } from "./model/canonical.js";
+export { assertMoney, MONEY_AMOUNT_PATTERN, MONEY_CURRENCY_PATTERN, moneyScaleOk, parseMoney, } from "./model/money.js";
+export { createGate } from "./gate/gate.js";
+export type { Gate, GateOptions, WriteProposal } from "./gate/gate.js";
+export { attestorOf, decide, markExecuted, resubmit } from "./gate/decide.js";
+export type { DecideDeps, Decision, ExecutionReport, MemberAttestation, RelayAttestation, } from "./gate/decide.js";
+export { emptyMandatoryFields, evaluatePolicies, unboundDeclaredInput } from "./gate/policy.js";
+export type { ApprovalPolicy, PolicyChainDeps, PolicyOutcome, StandingOrderBlockedReason, UnboundInput, Verdict, } from "./gate/policy.js";
+export { assessCoverage, coverageRefusedMarker, createCoverageRegistry, declareUncovered, isUncoveredCategory, UNCOVERED_CATEGORIES, } from "./gate/coverage.js";
+export type { CoverageAssessment, CoverageRegistry, ToolDefinition, UncoveredCategory, UncoveredDeclaration, } from "./gate/coverage.js";
+export { deriveEntryId, runPipeline } from "./gate/pipeline.js";
+export type { EvidenceCardRequest, FiledEntry, PipelineDeps, PipelineProposal, PreparedField, } from "./gate/pipeline.js";
+export { wrapTool } from "./gate/wrap.js";
+export type { GatedTool, GatedToolResult } from "./gate/wrap.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,yEAAyE;AACzE,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIrD,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAIlG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChG,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAIvD,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,OAAO,EACP,MAAM,EACN,WAAW,EACX,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,KAAK,EACL,SAAS,GACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,EACb,OAAO,EACP,eAAe,EACf,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,MAAM,GACP,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,QAAQ,EACR,cAAc,EACd,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EACV,iBAAiB,EACjB,KAAK,EACL,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,QAAQ,EACR,UAAU,EACV,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,aAAa,EACb,cAAc,EACd,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,OAAO,EACP,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,KAAK,EACL,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,YAAY,EACV,WAAW,EACX,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,KAAK,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EACL,2BAA2B,EAC3B,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,SAAS,EACT,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhG,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,UAAU,GACX,MAAM,kBAAkB,CAAC;AAY1B,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AASvE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC9E,YAAY,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAChG,YAAY,EACV,cAAc,EACd,eAAe,EACf,aAAa,EACb,0BAA0B,EAC1B,YAAY,EACZ,OAAO,GACR,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAChE,YAAY,EACV,mBAAmB,EACnB,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,111 @@
+/**
+ * `@affiant/core` — the Affiant gate for TypeScript.
+ *
+ * Affiant turns every database write an LLM agent proposes into an **Affidavit**:
+ * a per-field evidence record carrying the proposed value, the value it replaces,
+ * where each value came from and how confident the producer is. An Affidavit is
+ * filed as a **Docket** entry and shown to a person as an **Evidence Card**, which
+ * they approve, amend or reject before the host commits anything. A **Standing
+ * Order** is a policy verdict that approves a write with no person present.
+ *
+ * This package is the gate itself. It is held equivalent to the .NET
+ * implementation by the rulebook at
+ * {@link https://github.com/Sakwala/affiant-protocol}: numbered invariants and a
+ * shared conformance fixture suite that both implementations run.
+ *
+ * **What this package does not contain, by rule:** a model client, a risk-scoring
+ * formula, an executor, a transport and a production store. Each is a port the host
+ * supplies (see `ports.ts`), which is what lets one gate sit in front of any model,
+ * any database and any approval surface.
+ *
+ * **What is here at `0.1.0-alpha.0`:** the turn context (GT-2), the port
+ * interfaces, the error-code registry (CV-1), the telemetry-key registry (TL-1) and
+ * the Affidavit model — the provenance ladder with its bindings and merge rule
+ * (PV-1..PV-3, PV-5), the Affidavit and its three confidence numbers (AF-1..AF-3),
+ * and amendment semantics with the recompute they force (DK-2, AF-4); the Docket —
+ * the entry, the store contract and the in-memory reference stores (DK-1, DK-3,
+ * DK-4, DK-5), the last of these behind `@affiant/core/store-memory`; the canonical
+ * form and its SHA-256 (SR-1, SR-2); and **the gate pipeline** — `createGate`,
+ * `wrap`, the interceptor and inference steps, projection, the substance refusal,
+ * the policy chain with Standing Orders, TTL after policy and filing with the
+ * Standing Order attestation (GT-1, GT-3..GT-6, AZ-1, AZ-4, PV-4, CV-1, CV-4, SR-4);
+ * and **the decision path** — `decide`, `markExecuted`, `resubmit` and `rehydrate` on
+ * the gate: fail-closed tenant-scoped authorization, the three attestation kinds with
+ * a relay's identity mapped to `member-via-relay`, amendments with the recompute they
+ * force, the execution outcome a host reports, resubmission lineage and rehydration
+ * order (AZ-1..AZ-3, AZ-5..AZ-7, DK-1, DK-2, DK-5, AF-4, PV-2).
+ *
+ * Three checks stand between a policy's verdict and a write with no person present, and
+ * each degrades to asking a person rather than refusing: a proposed field marked
+ * mandatory that reads `Empty` (GT-5), a declared provenance input above `Conversation`
+ * pointing at nothing (PV-4), and a host risk score above the policy's threshold (GT-5).
+ *
+ * The fixtures for both v0.1 sequences and the runner that executes them are behind
+ * `@affiant/core/testing`, which a host can point at its own ports.
+ *
+ * **Not on npm.** The version string exists so the conformance driver can pin it.
+ * Publishing waits on two things — a public parity report naming what each
+ * implementation does not yet pass, and a green, merge-blocking TypeScript conformance
+ * driver — and a `prepack` guard enforces the wait rather than documenting it. See the
+ * package README.
+ *
+ * @packageDocumentation
+ */
+/** The version of this package. Not published to npm at this version. */
+export const CORE_VERSION = "0.1.0-alpha.0";
+/**
+ * The protocol tag the wire types are pinned to, re-exported from
+ * `@affiant/contract` so a host that only depends on the gate can still assert
+ * which rulebook tag it is speaking.
+ */
+export { PROTOCOL_VERSION } from "@affiant/contract";
+// -------------------------------------------------------------------- errors
+export { AffiantError, ERROR_CODES, ErrorCode, isAffiantError, isErrorCode } from "./errors.js";
+// ----------------------------------------------------------------- telemetry
+export { isTelemetryKey, noopTelemetry, TELEMETRY_KEYS, TELEMETRY_REGISTRY_VERSION, } from "./telemetry.js";
+// model
+// ---------------------------------------------------------------------------
+// Added by pull request C2 (`core/model`). Kept as one block so the pull requests
+// that follow can append their own without fighting over this file.
+export { AFFIDAVIT_FIELD_KINDS, buildAffidavit, computeConfidence, fromWire, isJsonValue, isMoney, toWire, wireCarryOf, withConfidence, } from "./model/affidavit.js";
+export { amendmentTag, applyAmendments, hasAmendment, resolveAmendments, } from "./model/amendments.js";
+export { BINDING_KINDS, chainOf, determinismRank, emptyTag, isBound, isHonourable, merge, mintConversation, mintInference, mintInferred, mintTag, PROVENANCE_LADDER, requiresBinding, supersede, tagsOf, } from "./model/provenance.js";
+// end model
+// ---------------------------------------------------------------------------
+// --------------------------------------------------------------------- ports
+export { defaultClock } from "./ports.js";
+// --------------------------------------------------------------------- docket
+export { BLOCKED_CODES, DOCKET_STATUSES, EXECUTION_OUTCOMES, isTerminal, newEntry, readStatus, REQUIREMENT_KINDS, } from "./docket/entry.js";
+export { compareFilingOrder, instantMs, isDue, remainingMs, requireInstant, } from "./docket/expiry.js";
+// canonical
+// ---------------------------------------------------------------------------
+// Added by pull request C3 (`core/canonical`). `Money` and `isMoney` are exported
+// from the model block above, which sources them from `./model/money.js` — one
+// definition, reachable by the path a caller expects.
+export { applyAmendmentsForCanonical, canonicalHash, canonicalHashEntry, canonicalize, canonicalizeEntry, canonicalJson, canonicalString, canonicalStringEntry, sha256Hex, swornAffidavitOf, } from "./model/canonical.js";
+export { assertMoney, MONEY_AMOUNT_PATTERN, MONEY_CURRENCY_PATTERN, moneyScaleOk, parseMoney, } from "./model/money.js";
+// end canonical
+// ---------------------------------------------------------------------------
+// ---------------------------------------------------------------------------
+// gate
+// ---------------------------------------------------------------------------
+// Added by pull request C5 (`core/pipeline`). `createGate` is the whole of the
+// host-facing surface; everything else here is a type a host needs to write a
+// policy, a tool definition or a card renderer against.
+export { createGate } from "./gate/gate.js";
+// decisions
+// ---------------------------------------------------------------------------
+// Added by pull request C6 (`core/decide`). The three functions are the same ones
+// `Gate` exposes as methods; they are exported so a host can call the decision path
+// with its own assembled dependencies, and so a conformance driver can reach them
+// without building a gate.
+export { attestorOf, decide, markExecuted, resubmit } from "./gate/decide.js";
+// end decisions
+// ---------------------------------------------------------------------------
+export { emptyMandatoryFields, evaluatePolicies, unboundDeclaredInput } from "./gate/policy.js";
+export { assessCoverage, coverageRefusedMarker, createCoverageRegistry, declareUncovered, isUncoveredCategory, UNCOVERED_CATEGORIES, } from "./gate/coverage.js";
+export { deriveEntryId, runPipeline } from "./gate/pipeline.js";
+export { wrapTool } from "./gate/wrap.js";
+// end gate
+// ---------------------------------------------------------------------------
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,eAAe,CAAC;AAE5C;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAMrD,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGhG,8EAA8E;AAE9E,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AASxB,QAAQ;AACR,8EAA8E;AAC9E,kFAAkF;AAClF,oEAAoE;AAEpE,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,OAAO,EACP,MAAM,EACN,WAAW,EACX,cAAc,GACf,MAAM,sBAAsB,CAAC;AAc9B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EACL,aAAa,EACb,OAAO,EACP,eAAe,EACf,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,MAAM,GACP,MAAM,uBAAuB,CAAC;AAmB/B,YAAY;AACZ,8EAA8E;AAE9E,8EAA8E;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAmB1C,+EAA+E;AAE/E,OAAO,EACL,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,QAAQ,EACR,UAAU,EACV,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAiB3B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,KAAK,EACL,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAkB5B,YAAY;AACZ,8EAA8E;AAC9E,kFAAkF;AAClF,+EAA+E;AAC/E,sDAAsD;AAEtD,OAAO,EACL,2BAA2B,EAC3B,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,SAAS,EACT,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,gBAAgB;AAChB,8EAA8E;AAE9E,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,YAAY;AACZ,8EAA8E;AAC9E,kFAAkF;AAClF,oFAAoF;AACpF,kFAAkF;AAClF,2BAA2B;AAE3B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAS9E,gBAAgB;AAChB,8EAA8E;AAE9E,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAUhG,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAShE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,WAAW;AACX,8EAA8E"}