@agentplat/inference-control 0.3.0-alpha.3

package/dist/canonical.js

@@ -0,0 +1,74 @@
+import { sha256Hex } from './sha256.js';
+const encoder = new TextEncoder();
+const surrogate = /[\uD800-\uDFFF]/u;
+function assertSafeString(value) {
+    if (surrogate.test(value)) {
+        for (let i = 0; i < value.length; i++) {
+            const code = value.charCodeAt(i);
+            if (code >= 0xd800 && code <= 0xdbff) {
+                if (++i >= value.length ||
+                    value.charCodeAt(i) < 0xdc00 ||
+                    value.charCodeAt(i) > 0xdfff)
+                    throw new TypeError('Unpaired surrogate is not canonical JSON');
+            }
+            else if (code >= 0xdc00 && code <= 0xdfff)
+                throw new TypeError('Unpaired surrogate is not canonical JSON');
+        }
+    }
+}
+function canonical(value, seen) {
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'string':
+            assertSafeString(value);
+            return JSON.stringify(value);
+        case 'number':
+            if (!Number.isFinite(value))
+                throw new TypeError('Canonical JSON requires finite numbers');
+            return Object.is(value, -0) ? '0' : JSON.stringify(value);
+        case 'object':
+            break;
+        default:
+            throw new TypeError('Canonical JSON contains a non-JSON value');
+    }
+    if (seen.has(value))
+        throw new TypeError('Canonical JSON cannot contain cycles');
+    seen.add(value);
+    let result;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++)
+            if (!Object.hasOwn(value, i))
+                throw new TypeError('Canonical JSON cannot contain sparse arrays');
+        result = `[${value.map((item) => canonical(item, seen)).join(',')}]`;
+    }
+    else {
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null)
+            throw new TypeError('Canonical JSON requires plain objects');
+        if (Object.getOwnPropertySymbols(value).length)
+            throw new TypeError('Canonical JSON cannot contain symbol keys');
+        const keys = Object.keys(value).sort();
+        for (const key of keys) {
+            assertSafeString(key);
+            if (Object.getOwnPropertyDescriptor(value, key)?.get ||
+                Object.getOwnPropertyDescriptor(value, key)?.set)
+                throw new TypeError('Canonical JSON cannot contain accessors');
+        }
+        result = `{${keys.map((key) => `${JSON.stringify(key)}:${canonical(value[key], seen)}`).join(',')}}`;
+    }
+    seen.delete(value);
+    return result;
+}
+export function canonicalizeControlJsonV1(value) {
+    return canonical(value, new Set());
+}
+export function digestControlJsonV1(domain, value) {
+    return `sha256:${sha256Hex(encoder.encode(`agentplat.inference-control/${domain}/v1\0${canonicalizeControlJsonV1(value)}`))}`;
+}
+export function utf8ByteLength(value) {
+    return encoder.encode(value).byteLength;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBACrC,IACE,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM;oBACnB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM;oBAC5B,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM;oBAE5B,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;gBACzC,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAiB;IAClD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACzB,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;YAChE,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,QAAQ;YACX,MAAM;QACR;YACE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QACjB,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,MAAc,CAAC;IACnB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1B,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;QACvE,MAAM,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YACtD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM;YAC5C,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,IACE,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG;gBAChD,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG;gBAEhD,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpI,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAgB;IACxD,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC;AACD,MAAM,UAAU,mBAAmB,CACjC,MAA6B,EAC7B,KAAgB;IAEhB,OAAO,UAAU,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,+BAA+B,MAAM,QAAQ,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAChI,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AAC1C,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,43 @@
+import type { CapabilityAssuranceV1, CapabilityBindingRequirementV1, CapabilityDescriptorV1, CapabilityHandleV1, ControlCheckpointV1, RequiredControlCapabilityV1, ReleaseModeV1 } from './types.js';
+export declare function validateCapabilityDescriptorV1(value: unknown): CapabilityDescriptorV1;
+export declare class CapabilityRegistryV1 {
+    #private;
+    register(input: {
+        descriptor: CapabilityDescriptorV1;
+        descriptorDigest?: string;
+        wrapperInstanceId: string;
+    }): CapabilityHandleV1;
+    resolve(handleId: string): CapabilityHandleV1 | undefined;
+    descriptor(handleId: string): CapabilityDescriptorV1 | undefined;
+    rebind(binding: CapabilityBindingRequirementV1): CapabilityHandleV1;
+}
+export declare function bindingMatches(handle: CapabilityHandleV1, binding: CapabilityBindingRequirementV1): boolean;
+export interface CapabilityNegotiationInputV1 {
+    readonly policyDigest: string;
+    readonly descriptorDigest: string;
+    readonly mode: ReleaseModeV1;
+    readonly checkpoints: readonly ControlCheckpointV1[];
+    readonly requiredCapabilities: readonly RequiredControlCapabilityV1[];
+    readonly minimumCapabilityAssurance: CapabilityAssuranceV1;
+    readonly allowedCapabilityBindings: readonly CapabilityBindingRequirementV1[];
+}
+export type CapabilityNegotiationResultV1 = {
+    schemaVersion: 1;
+    policyDigest: string;
+    descriptorDigest: string;
+    accepted: true;
+    effectiveReleaseMode: ReleaseModeV1;
+    enforcedCheckpoints: readonly ControlCheckpointV1[];
+    observedCheckpoints: readonly ControlCheckpointV1[];
+} | {
+    schemaVersion: 1;
+    policyDigest: string;
+    descriptorDigest: string;
+    accepted: false;
+    reasonCode: 'policy_capability_missing' | 'release_mode_incompatible';
+    missingCapabilities: readonly RequiredControlCapabilityV1[];
+};
+/** Validates the complete, replayable result of a capability negotiation. */
+export declare function validateCapabilityNegotiationResultV1(value: unknown): CapabilityNegotiationResultV1;
+export declare function negotiateCapabilitiesV1(descriptorInput: CapabilityDescriptorV1, input: CapabilityNegotiationInputV1): CapabilityNegotiationResultV1;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,qBAAqB,EACrB,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,aAAa,EACd,MAAM,YAAY,CAAC;AAkBpB,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,sBAAsB,CA2CxB;AACD,qBAAa,oBAAoB;;IAK/B,QAAQ,CAAC,KAAK,EAAE;QACd,UAAU,EAAE,sBAAsB,CAAC;QACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,GAAG,kBAAkB;IAgCtB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAGzD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS;IAGhE,MAAM,CAAC,OAAO,EAAE,8BAA8B,GAAG,kBAAkB;CAyBpE;AACD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAQT;AACD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACrD,QAAQ,CAAC,oBAAoB,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtE,QAAQ,CAAC,0BAA0B,EAAE,qBAAqB,CAAC;IAC3D,QAAQ,CAAC,yBAAyB,EAAE,SAAS,8BAA8B,EAAE,CAAC;CAC/E;AACD,MAAM,MAAM,6BAA6B,GACrC;IACE,aAAa,EAAE,CAAC,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,IAAI,CAAC;IACf,oBAAoB,EAAE,aAAa,CAAC;IACpC,mBAAmB,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,mBAAmB,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACrD,GACD;IACE,aAAa,EAAE,CAAC,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,2BAA2B,GAAG,2BAA2B,CAAC;IACtE,mBAAmB,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D,CAAC;AAEN,6EAA6E;AAC7E,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,OAAO,GACb,6BAA6B,CAwE/B;AAYD,wBAAgB,uBAAuB,CACrC,eAAe,EAAE,sBAAsB,EACvC,KAAK,EAAE,4BAA4B,GAClC,6BAA6B,CA2G/B"}

package/dist/capabilities.js

@@ -0,0 +1,304 @@
+import { digestControlJsonV1 } from './canonical.js';
+import { assertDigest, assertExactKeys, assertIdentifier, assertOneOf, assertSafeInteger, compareCodeUnits, deepFreeze, sortedUnique, } from './validation.js';
+const descriptorKeys = [
+    'schemaVersion',
+    'capabilityId',
+    'descriptorVersion',
+    'inputInspection',
+    'finalOutputAssessment',
+    'incrementalOutputAssessment',
+    'releaseInterruption',
+    'toolInterception',
+    'messageInterception',
+    'representationAccess',
+    'declarationSource',
+    'assurance',
+    'wrapperId',
+    'wrapperVersion',
+];
+export function validateCapabilityDescriptorV1(value) {
+    assertExactKeys(value, descriptorKeys, 'capability descriptor');
+    const v = value;
+    if (v.schemaVersion !== 1)
+        throw new TypeError('Unsupported capability schema');
+    assertIdentifier(v.capabilityId, 'capabilityId');
+    assertSafeInteger(v.descriptorVersion, 'descriptorVersion', 1);
+    assertIdentifier(v.wrapperId, 'wrapperId');
+    assertSafeInteger(v.wrapperVersion, 'wrapperVersion', 1);
+    assertOneOf(v.inputInspection, ['full', 'none'], 'inputInspection');
+    assertOneOf(v.finalOutputAssessment, ['full', 'none'], 'finalOutputAssessment');
+    assertOneOf(v.incrementalOutputAssessment, ['windowed', 'none'], 'incrementalOutputAssessment');
+    assertOneOf(v.releaseInterruption, ['local', 'none'], 'releaseInterruption');
+    assertOneOf(v.toolInterception, ['all', 'application_only', 'none'], 'toolInterception');
+    assertOneOf(v.messageInterception, ['application_only', 'none'], 'messageInterception');
+    assertOneOf(v.representationAccess, ['none', 'opaque', 'token'], 'representationAccess');
+    assertOneOf(v.declarationSource, ['wrapper', 'adapter'], 'declarationSource');
+    assertOneOf(v.assurance, ['reference_tested', 'application_verified', 'declared'], 'assurance');
+    return deepFreeze({ ...v });
+}
+export class CapabilityRegistryV1 {
+    #entries = new Map();
+    register(input) {
+        const descriptor = validateCapabilityDescriptorV1(input.descriptor);
+        assertIdentifier(input.wrapperInstanceId, 'wrapperInstanceId');
+        const digest = digestControlJsonV1('capability', descriptor);
+        if (input.descriptorDigest !== undefined) {
+            assertDigest(input.descriptorDigest, 'descriptorDigest');
+            if (input.descriptorDigest !== digest)
+                throw new TypeError('descriptorDigest does not match descriptor');
+        }
+        const id = `${descriptor.capabilityId}:${descriptor.descriptorVersion}:${descriptor.wrapperId}:${descriptor.wrapperVersion}:${input.wrapperInstanceId}`;
+        const prior = this.#entries.get(id);
+        if (prior && prior.handle.descriptorDigest !== digest)
+            throw new TypeError('Capability identity is already bound to different content');
+        if (prior)
+            return prior.handle;
+        const handle = deepFreeze({
+            schemaVersion: 1,
+            capabilityHandleId: id,
+            capabilityId: descriptor.capabilityId,
+            descriptorVersion: descriptor.descriptorVersion,
+            wrapperId: descriptor.wrapperId,
+            wrapperVersion: descriptor.wrapperVersion,
+            wrapperInstanceId: input.wrapperInstanceId,
+            descriptorDigest: digest,
+        });
+        this.#entries.set(id, { descriptor, handle });
+        return handle;
+    }
+    resolve(handleId) {
+        return this.#entries.get(handleId)?.handle;
+    }
+    descriptor(handleId) {
+        return this.#entries.get(handleId)?.descriptor;
+    }
+    rebind(binding) {
+        assertExactKeys(binding, [
+            'schemaVersion',
+            'capabilityId',
+            'descriptorVersion',
+            'wrapperId',
+            'wrapperVersion',
+            'descriptorDigest',
+            'requiredAssurance',
+        ], 'capability binding');
+        if (binding.schemaVersion !== 1)
+            throw new TypeError('dependency_rebind_failed');
+        assertDigest(binding.descriptorDigest, 'binding.descriptorDigest');
+        for (const entry of this.#entries.values())
+            if (bindingMatches(entry.handle, binding) &&
+                entry.descriptor.assurance === binding.requiredAssurance)
+                return entry.handle;
+        throw new TypeError('dependency_rebind_failed');
+    }
+}
+export function bindingMatches(handle, binding) {
+    return (handle.capabilityId === binding.capabilityId &&
+        handle.descriptorVersion === binding.descriptorVersion &&
+        handle.wrapperId === binding.wrapperId &&
+        handle.wrapperVersion === binding.wrapperVersion &&
+        handle.descriptorDigest === binding.descriptorDigest);
+}
+/** Validates the complete, replayable result of a capability negotiation. */
+export function validateCapabilityNegotiationResultV1(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        throw new TypeError('capability negotiation result must be an object');
+    const result = value;
+    if (result.accepted === true) {
+        assertExactKeys(result, [
+            'schemaVersion',
+            'policyDigest',
+            'descriptorDigest',
+            'accepted',
+            'effectiveReleaseMode',
+            'enforcedCheckpoints',
+            'observedCheckpoints',
+        ], 'accepted capability negotiation result');
+        if (result.schemaVersion !== 1)
+            throw new TypeError('Unsupported capability negotiation schema');
+        assertDigest(result.policyDigest, 'policyDigest');
+        assertDigest(result.descriptorDigest, 'descriptorDigest');
+        assertOneOf(result.effectiveReleaseMode, ['observe', 'buffered', 'incremental'], 'effectiveReleaseMode');
+        validateCheckpoints(result.enforcedCheckpoints, 'enforcedCheckpoints');
+        validateCheckpoints(result.observedCheckpoints, 'observedCheckpoints');
+        const enforced = result.enforcedCheckpoints;
+        const observed = result.observedCheckpoints;
+        if (enforced.some((checkpoint) => observed.includes(checkpoint)))
+            throw new TypeError('capability negotiation checkpoint is duplicated');
+        return deepFreeze(structuredClone(result));
+    }
+    if (result.accepted !== false)
+        throw new TypeError('capability negotiation accepted must be boolean');
+    assertExactKeys(result, [
+        'schemaVersion',
+        'policyDigest',
+        'descriptorDigest',
+        'accepted',
+        'reasonCode',
+        'missingCapabilities',
+    ], 'rejected capability negotiation result');
+    if (result.schemaVersion !== 1)
+        throw new TypeError('Unsupported capability negotiation schema');
+    assertDigest(result.policyDigest, 'policyDigest');
+    assertDigest(result.descriptorDigest, 'descriptorDigest');
+    assertOneOf(result.reasonCode, ['policy_capability_missing', 'release_mode_incompatible'], 'reasonCode');
+    if (!Array.isArray(result.missingCapabilities))
+        throw new TypeError('missingCapabilities must be an array');
+    for (const requirement of result.missingCapabilities)
+        validateRequirement(requirement);
+    sortedUnique(result.missingCapabilities.map((requirement) => `${requirement.kind}:${requirement.value}`), 'missingCapabilities');
+    return deepFreeze(structuredClone(result));
+}
+function validateCheckpoints(value, name) {
+    if (!Array.isArray(value))
+        throw new TypeError(`${name} must be an array`);
+    for (const checkpoint of value)
+        assertOneOf(checkpoint, ['pre_run', 'stream', 'post_run', 'pre_tool', 'pre_message'], name);
+    sortedUnique(value, name);
+}
+export function negotiateCapabilitiesV1(descriptorInput, input) {
+    const descriptor = validateCapabilityDescriptorV1(descriptorInput);
+    assertDigest(input.policyDigest, 'policyDigest');
+    assertDigest(input.descriptorDigest, 'descriptorDigest');
+    assertOneOf(input.mode, ['observe', 'buffered', 'incremental'], 'mode');
+    assertOneOf(input.minimumCapabilityAssurance, ['verified', 'declared'], 'minimumCapabilityAssurance');
+    for (const checkpoint of input.checkpoints)
+        assertOneOf(checkpoint, ['pre_run', 'stream', 'post_run', 'pre_tool', 'pre_message'], 'checkpoint');
+    sortedUnique(input.checkpoints, 'checkpoints');
+    for (const requirement of input.requiredCapabilities)
+        validateRequirement(requirement);
+    sortedUnique(input.requiredCapabilities.map((requirement) => `${requirement.kind}:${requirement.value}`), 'requiredCapabilities');
+    for (const binding of input.allowedCapabilityBindings)
+        validateBinding(binding);
+    const actualDigest = digestControlJsonV1('capability', descriptor);
+    if (input.descriptorDigest !== actualDigest)
+        throw new TypeError('descriptorDigest does not match descriptor');
+    const requirements = [...input.requiredCapabilities];
+    if (input.mode === 'incremental') {
+        requirements.push({ kind: 'incremental_output_assessment', value: 'windowed' }, { kind: 'release_interruption', value: 'local' });
+    }
+    const missing = requirements.filter((requirement) => !requirementSatisfied(descriptor, requirement));
+    const allowed = input.allowedCapabilityBindings.some((binding) => bindingMatches({
+        schemaVersion: 1,
+        capabilityHandleId: 'negotiation',
+        capabilityId: descriptor.capabilityId,
+        descriptorVersion: descriptor.descriptorVersion,
+        wrapperId: descriptor.wrapperId,
+        wrapperVersion: descriptor.wrapperVersion,
+        wrapperInstanceId: 'negotiation',
+        descriptorDigest: actualDigest,
+    }, binding) && binding.requiredAssurance === descriptor.assurance);
+    const verified = descriptor.assurance === 'reference_tested' ||
+        descriptor.assurance === 'application_verified';
+    if (input.mode === 'observe')
+        return {
+            schemaVersion: 1,
+            policyDigest: input.policyDigest,
+            descriptorDigest: actualDigest,
+            accepted: true,
+            effectiveReleaseMode: 'observe',
+            enforcedCheckpoints: [],
+            observedCheckpoints: [...input.checkpoints].sort(),
+        };
+    if (!allowed ||
+        (input.minimumCapabilityAssurance === 'verified' && !verified) ||
+        descriptor.assurance === 'declared' ||
+        missing.length)
+        return {
+            schemaVersion: 1,
+            policyDigest: input.policyDigest,
+            descriptorDigest: actualDigest,
+            accepted: false,
+            reasonCode: 'policy_capability_missing',
+            missingCapabilities: [...missing].sort(compareRequirement),
+        };
+    if (input.mode === 'incremental' &&
+        descriptor.releaseInterruption !== 'local')
+        return {
+            schemaVersion: 1,
+            policyDigest: input.policyDigest,
+            descriptorDigest: actualDigest,
+            accepted: false,
+            reasonCode: 'release_mode_incompatible',
+            missingCapabilities: [],
+        };
+    return {
+        schemaVersion: 1,
+        policyDigest: input.policyDigest,
+        descriptorDigest: actualDigest,
+        accepted: true,
+        effectiveReleaseMode: input.mode,
+        enforcedCheckpoints: [...input.checkpoints].sort(),
+        observedCheckpoints: [],
+    };
+}
+function validateBinding(binding) {
+    assertExactKeys(binding, [
+        'schemaVersion',
+        'capabilityId',
+        'descriptorVersion',
+        'wrapperId',
+        'wrapperVersion',
+        'descriptorDigest',
+        'requiredAssurance',
+    ], 'capability binding');
+    if (binding.schemaVersion !== 1)
+        throw new TypeError('Unsupported capability binding');
+    assertIdentifier(binding.capabilityId, 'capabilityId');
+    assertSafeInteger(binding.descriptorVersion, 'descriptorVersion', 1);
+    assertIdentifier(binding.wrapperId, 'wrapperId');
+    assertSafeInteger(binding.wrapperVersion, 'wrapperVersion', 1);
+    assertDigest(binding.descriptorDigest, 'descriptorDigest');
+    assertOneOf(binding.requiredAssurance, ['reference_tested', 'application_verified', 'declared'], 'requiredAssurance');
+}
+function validateRequirement(value) {
+    assertExactKeys(value, ['kind', 'value'], 'required capability');
+    switch (value.kind) {
+        case 'input_inspection':
+        case 'final_output_assessment':
+            assertOneOf(value.value, ['full'], 'required capability value');
+            return;
+        case 'incremental_output_assessment':
+            assertOneOf(value.value, ['windowed'], 'required capability value');
+            return;
+        case 'release_interruption':
+            assertOneOf(value.value, ['local'], 'required capability value');
+            return;
+        case 'tool_interception':
+            assertOneOf(value.value, ['application_only', 'all'], 'required capability value');
+            return;
+        case 'message_interception':
+            assertOneOf(value.value, ['application_only'], 'required capability value');
+            return;
+        case 'representation_access':
+            assertOneOf(value.value, ['opaque', 'token'], 'required capability value');
+            return;
+        default:
+            throw new TypeError('required capability kind is invalid');
+    }
+}
+function requirementSatisfied(descriptor, requirement) {
+    switch (requirement.kind) {
+        case 'input_inspection':
+            return descriptor.inputInspection === requirement.value;
+        case 'final_output_assessment':
+            return descriptor.finalOutputAssessment === requirement.value;
+        case 'incremental_output_assessment':
+            return descriptor.incrementalOutputAssessment === requirement.value;
+        case 'release_interruption':
+            return descriptor.releaseInterruption === requirement.value;
+        case 'tool_interception':
+            return requirement.value === 'application_only'
+                ? descriptor.toolInterception === 'application_only' ||
+                    descriptor.toolInterception === 'all'
+                : descriptor.toolInterception === 'all';
+        case 'message_interception':
+            return descriptor.messageInterception === requirement.value;
+        case 'representation_access':
+            return descriptor.representationAccess === requirement.value;
+    }
+}
+function compareRequirement(left, right) {
+    return compareCodeUnits(`${left.kind}:${left.value}`, `${right.kind}:${right.value}`);
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EAEjB,gBAAgB,EAChB,UAAU,EACV,YAAY,GACb,MAAM,iBAAiB,CAAC;AAWzB,MAAM,cAAc,GAAG;IACrB,eAAe;IACf,cAAc;IACd,mBAAmB;IACnB,iBAAiB;IACjB,uBAAuB;IACvB,6BAA6B;IAC7B,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,WAAW;IACX,WAAW;IACX,gBAAgB;CACR,CAAC;AACX,MAAM,UAAU,8BAA8B,CAC5C,KAAc;IAEd,eAAe,CAAC,KAAK,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,gBAAgB,CAAC,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjD,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC/D,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3C,iBAAiB,CAAC,CAAC,CAAC,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACzD,WAAW,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACpE,WAAW,CACT,CAAC,CAAC,qBAAqB,EACvB,CAAC,MAAM,EAAE,MAAM,CAAC,EAChB,uBAAuB,CACxB,CAAC;IACF,WAAW,CACT,CAAC,CAAC,2BAA2B,EAC7B,CAAC,UAAU,EAAE,MAAM,CAAC,EACpB,6BAA6B,CAC9B,CAAC;IACF,WAAW,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC7E,WAAW,CACT,CAAC,CAAC,gBAAgB,EAClB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,EACnC,kBAAkB,CACnB,CAAC;IACF,WAAW,CACT,CAAC,CAAC,mBAAmB,EACrB,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAC5B,qBAAqB,CACtB,CAAC;IACF,WAAW,CACT,CAAC,CAAC,oBAAoB,EACtB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAC3B,sBAAsB,CACvB,CAAC;IACF,WAAW,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC9E,WAAW,CACT,CAAC,CAAC,SAAS,EACX,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,UAAU,CAAC,EACxD,WAAW,CACZ,CAAC;IACF,OAAO,UAAU,CAAC,EAAE,GAAG,CAAC,EAAuC,CAAC,CAAC;AACnE,CAAC;AACD,MAAM,OAAO,oBAAoB;IAC/B,QAAQ,GAAG,IAAI,GAAG,EAGf,CAAC;IACJ,QAAQ,CAAC,KAIR;QACC,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpE,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,mBAAmB,CAChC,YAAY,EACZ,UAA4D,CAC7D,CAAC;QACF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM;gBACnC,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,YAAY,IAAI,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,gBAAgB,KAAK,MAAM;YACnD,MAAM,IAAI,SAAS,CACjB,2DAA2D,CAC5D,CAAC;QACJ,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,aAAa,EAAE,CAAU;YACzB,kBAAkB,EAAE,EAAE;YACtB,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;YAC/C,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,gBAAgB,EAAE,MAAM;SACzB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC7C,CAAC;IACD,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IACjD,CAAC;IACD,MAAM,CAAC,OAAuC;QAC5C,eAAe,CACb,OAAO,EACP;YACE,eAAe;YACf,cAAc;YACd,mBAAmB;YACnB,WAAW;YACX,gBAAgB;YAChB,kBAAkB;YAClB,mBAAmB;SACpB,EACD,oBAAoB,CACrB,CAAC;QACF,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QACnE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YACxC,IACE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;gBACrC,KAAK,CAAC,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,iBAAiB;gBAExD,OAAO,KAAK,CAAC,MAAM,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;CACF;AACD,MAAM,UAAU,cAAc,CAC5B,MAA0B,EAC1B,OAAuC;IAEvC,OAAO,CACL,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;QAC5C,MAAM,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;QACtD,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QACtC,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAChD,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,CACrD,CAAC;AACJ,CAAC;AA6BD,6EAA6E;AAC7E,MAAM,UAAU,qCAAqC,CACnD,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,eAAe,CACb,MAAM,EACN;YACE,eAAe;YACf,cAAc;YACd,kBAAkB;YAClB,UAAU;YACV,sBAAsB;YACtB,qBAAqB;YACrB,qBAAqB;SACtB,EACD,wCAAwC,CACzC,CAAC;QACF,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAClD,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC1D,WAAW,CACT,MAAM,CAAC,oBAAoB,EAC3B,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EACtC,sBAAsB,CACvB,CAAC;QACF,mBAAmB,CAAC,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QACvE,mBAAmB,CAAC,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;QACvE,MAAM,QAAQ,GACZ,MAAM,CAAC,mBAAqD,CAAC;QAC/D,MAAM,QAAQ,GACZ,MAAM,CAAC,mBAAqD,CAAC;QAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,OAAO,UAAU,CAAC,eAAe,CAAC,MAAM,CAAkC,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;QAC3B,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,eAAe,CACb,MAAM,EACN;QACE,eAAe;QACf,cAAc;QACd,kBAAkB;QAClB,UAAU;QACV,YAAY;QACZ,qBAAqB;KACtB,EACD,wCAAwC,CACzC,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAClD,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC1D,WAAW,CACT,MAAM,CAAC,UAAU,EACjB,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,EAC1D,YAAY,CACb,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,mBAAmB;QAClD,mBAAmB,CAAC,WAA0C,CAAC,CAAC;IAClE,YAAY,CACV,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAC5B,CAAC,WAAW,EAAE,EAAE,CACd,GAAI,WAA2C,CAAC,IAAI,IAAK,WAA2C,CAAC,KAAK,EAAE,CAC/G,EACD,qBAAqB,CACtB,CAAC;IACF,OAAO,UAAU,CAAC,eAAe,CAAC,MAAM,CAAkC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC3E,KAAK,MAAM,UAAU,IAAI,KAAK;QAC5B,WAAW,CACT,UAAU,EACV,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,EAC5D,IAAI,CACL,CAAC;IACJ,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,uBAAuB,CACrC,eAAuC,EACvC,KAAmC;IAEnC,MAAM,UAAU,GAAG,8BAA8B,CAAC,eAAe,CAAC,CAAC;IACnE,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACjD,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACzD,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,WAAW,CACT,KAAK,CAAC,0BAA0B,EAChC,CAAC,UAAU,EAAE,UAAU,CAAC,EACxB,4BAA4B,CAC7B,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW;QACxC,WAAW,CACT,UAAU,EACV,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,EAC5D,YAAY,CACb,CAAC;IACJ,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/C,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,oBAAoB;QAClD,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACnC,YAAY,CACV,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAC5B,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAC5D,EACD,sBAAsB,CACvB,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,yBAAyB;QACnD,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,mBAAmB,CACtC,YAAY,EACZ,UAA4D,CAC7D,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,KAAK,YAAY;QACzC,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,YAAY,CAAC,IAAI,CACf,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,UAAU,EAAE,EAC5D,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CACjC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,WAAW,CAAC,CAChE,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAClD,CAAC,OAAO,EAAE,EAAE,CACV,cAAc,CACZ;QACE,aAAa,EAAE,CAAC;QAChB,kBAAkB,EAAE,aAAa;QACjC,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,iBAAiB,EAAE,aAAa;QAChC,gBAAgB,EAAE,YAAY;KAC/B,EACD,OAAO,CACR,IAAI,OAAO,CAAC,iBAAiB,KAAK,UAAU,CAAC,SAAS,CAC1D,CAAC;IACF,MAAM,QAAQ,GACZ,UAAU,CAAC,SAAS,KAAK,kBAAkB;QAC3C,UAAU,CAAC,SAAS,KAAK,sBAAsB,CAAC;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAC1B,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,YAAY;YAC9B,QAAQ,EAAE,IAAI;YACd,oBAAoB,EAAE,SAAS;YAC/B,mBAAmB,EAAE,EAAE;YACvB,mBAAmB,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;SACnD,CAAC;IACJ,IACE,CAAC,OAAO;QACR,CAAC,KAAK,CAAC,0BAA0B,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC;QAC9D,UAAU,CAAC,SAAS,KAAK,UAAU;QACnC,OAAO,CAAC,MAAM;QAEd,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,YAAY;YAC9B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,2BAA2B;YACvC,mBAAmB,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;SAC3D,CAAC;IACJ,IACE,KAAK,CAAC,IAAI,KAAK,aAAa;QAC5B,UAAU,CAAC,mBAAmB,KAAK,OAAO;QAE1C,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,gBAAgB,EAAE,YAAY;YAC9B,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,2BAA2B;YACvC,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,gBAAgB,EAAE,YAAY;QAC9B,QAAQ,EAAE,IAAI;QACd,oBAAoB,EAAE,KAAK,CAAC,IAAI;QAChC,mBAAmB,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE;QAClD,mBAAmB,EAAE,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAuC;IAC9D,eAAe,CACb,OAAO,EACP;QACE,eAAe;QACf,cAAc;QACd,mBAAmB;QACnB,WAAW;QACX,gBAAgB;QAChB,kBAAkB;QAClB,mBAAmB;KACpB,EACD,oBAAoB,CACrB,CAAC;IACF,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACvD,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACrE,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC/D,YAAY,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC3D,WAAW,CACT,OAAO,CAAC,iBAAiB,EACzB,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,UAAU,CAAC,EACxD,mBAAmB,CACpB,CAAC;AACJ,CAAC;AACD,SAAS,mBAAmB,CAAC,KAAkC;IAC7D,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACjE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,kBAAkB,CAAC;QACxB,KAAK,yBAAyB;YAC5B,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC,CAAC;YAChE,OAAO;QACT,KAAK,+BAA+B;YAClC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC,CAAC;YACpE,OAAO;QACT,KAAK,sBAAsB;YACzB,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;YACjE,OAAO;QACT,KAAK,mBAAmB;YACtB,WAAW,CACT,KAAK,CAAC,KAAK,EACX,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAC3B,2BAA2B,CAC5B,CAAC;YACF,OAAO;QACT,KAAK,sBAAsB;YACzB,WAAW,CACT,KAAK,CAAC,KAAK,EACX,CAAC,kBAAkB,CAAC,EACpB,2BAA2B,CAC5B,CAAC;YACF,OAAO;QACT,KAAK,uBAAuB;YAC1B,WAAW,CACT,KAAK,CAAC,KAAK,EACX,CAAC,QAAQ,EAAE,OAAO,CAAC,EACnB,2BAA2B,CAC5B,CAAC;YACF,OAAO;QACT;YACE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAkC,EAClC,WAAwC;IAExC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,kBAAkB;YACrB,OAAO,UAAU,CAAC,eAAe,KAAK,WAAW,CAAC,KAAK,CAAC;QAC1D,KAAK,yBAAyB;YAC5B,OAAO,UAAU,CAAC,qBAAqB,KAAK,WAAW,CAAC,KAAK,CAAC;QAChE,KAAK,+BAA+B;YAClC,OAAO,UAAU,CAAC,2BAA2B,KAAK,WAAW,CAAC,KAAK,CAAC;QACtE,KAAK,sBAAsB;YACzB,OAAO,UAAU,CAAC,mBAAmB,KAAK,WAAW,CAAC,KAAK,CAAC;QAC9D,KAAK,mBAAmB;YACtB,OAAO,WAAW,CAAC,KAAK,KAAK,kBAAkB;gBAC7C,CAAC,CAAC,UAAU,CAAC,gBAAgB,KAAK,kBAAkB;oBAChD,UAAU,CAAC,gBAAgB,KAAK,KAAK;gBACzC,CAAC,CAAC,UAAU,CAAC,gBAAgB,KAAK,KAAK,CAAC;QAC5C,KAAK,sBAAsB;YACzB,OAAO,UAAU,CAAC,mBAAmB,KAAK,WAAW,CAAC,KAAK,CAAC;QAC9D,KAAK,uBAAuB;YAC1B,OAAO,UAAU,CAAC,oBAAoB,KAAK,WAAW,CAAC,KAAK,CAAC;IACjE,CAAC;AACH,CAAC;AACD,SAAS,kBAAkB,CACzB,IAAiC,EACjC,KAAkC;IAElC,OAAO,gBAAgB,CACrB,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,EAC5B,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAC/B,CAAC;AACJ,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,7 @@
+import type { ContextEntryV1, ContextZoneV1, InferenceControlPolicyV1, PromotionRecordV1 } from './types.js';
+export declare function validateContextEntryV1(value: unknown): ContextEntryV1;
+export declare function createContextEntryV1(input: Omit<ContextEntryV1, 'schemaVersion' | 'contentDigest' | 'provenanceDigest' | 'encodedBytes'>): ContextEntryV1;
+export declare function canAdmitContextEntryV1(policy: InferenceControlPolicyV1, existing: readonly ContextEntryV1[], entry: ContextEntryV1): boolean;
+export declare function promoteContextEntryV1(source: ContextEntryV1, promotion: PromotionRecordV1, policy: InferenceControlPolicyV1): ContextEntryV1;
+export declare const CONTEXT_ZONES_V1: readonly ContextZoneV1[];
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,wBAAwB,EACxB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAwBpB,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAwErE;AACD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,IAAI,CACT,cAAc,EACd,eAAe,GAAG,eAAe,GAAG,kBAAkB,GAAG,cAAc,CACxE,GACA,cAAc,CAgBhB;AACD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,wBAAwB,EAChC,QAAQ,EAAE,SAAS,cAAc,EAAE,EACnC,KAAK,EAAE,cAAc,GACpB,OAAO,CAWT;AACD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,wBAAwB,GAC/B,cAAc,CA2BhB;AACD,eAAO,MAAM,gBAAgB,EAAE,SAAS,aAAa,EAAU,CAAC"}