@agentplat/inference-control 0.3.0-beta.2 → 0.3.0-beta.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +360 -0
- package/dist/anytime-semantic-guarantees.d.ts +216 -0
- package/dist/anytime-semantic-guarantees.d.ts.map +1 -0
- package/dist/anytime-semantic-guarantees.js +817 -0
- package/dist/anytime-semantic-guarantees.js.map +1 -0
- package/dist/assessor-ensemble-contracts.d.ts +145 -0
- package/dist/assessor-ensemble-contracts.d.ts.map +1 -0
- package/dist/assessor-ensemble-contracts.js +29 -0
- package/dist/assessor-ensemble-contracts.js.map +1 -0
- package/dist/assessor-ensemble-runtime.d.ts +55 -0
- package/dist/assessor-ensemble-runtime.d.ts.map +1 -0
- package/dist/assessor-ensemble-runtime.js +308 -0
- package/dist/assessor-ensemble-runtime.js.map +1 -0
- package/dist/assessor-ensemble-validation.d.ts +12 -0
- package/dist/assessor-ensemble-validation.d.ts.map +1 -0
- package/dist/assessor-ensemble-validation.js +156 -0
- package/dist/assessor-ensemble-validation.js.map +1 -0
- package/dist/assessor-ensemble.d.ts +4 -0
- package/dist/assessor-ensemble.d.ts.map +1 -0
- package/dist/assessor-ensemble.js +4 -0
- package/dist/assessor-ensemble.js.map +1 -0
- package/dist/cognitive-adapters.d.ts +92 -0
- package/dist/cognitive-adapters.d.ts.map +1 -0
- package/dist/cognitive-adapters.js +263 -0
- package/dist/cognitive-adapters.js.map +1 -0
- package/dist/context-integrity-analyzers.d.ts +35 -0
- package/dist/context-integrity-analyzers.d.ts.map +1 -0
- package/dist/context-integrity-analyzers.js +387 -0
- package/dist/context-integrity-analyzers.js.map +1 -0
- package/dist/context-integrity-contracts.d.ts +304 -0
- package/dist/context-integrity-contracts.d.ts.map +1 -0
- package/dist/context-integrity-contracts.js +24 -0
- package/dist/context-integrity-contracts.js.map +1 -0
- package/dist/context-integrity-model.d.ts +25 -0
- package/dist/context-integrity-model.d.ts.map +1 -0
- package/dist/context-integrity-model.js +192 -0
- package/dist/context-integrity-model.js.map +1 -0
- package/dist/context-integrity-portable-agent.d.ts +79 -0
- package/dist/context-integrity-portable-agent.d.ts.map +1 -0
- package/dist/context-integrity-portable-agent.js +511 -0
- package/dist/context-integrity-portable-agent.js.map +1 -0
- package/dist/context-integrity-role-alignment.d.ts +28 -0
- package/dist/context-integrity-role-alignment.d.ts.map +1 -0
- package/dist/context-integrity-role-alignment.js +95 -0
- package/dist/context-integrity-role-alignment.js.map +1 -0
- package/dist/context-integrity-runtime.d.ts +95 -0
- package/dist/context-integrity-runtime.d.ts.map +1 -0
- package/dist/context-integrity-runtime.js +1512 -0
- package/dist/context-integrity-runtime.js.map +1 -0
- package/dist/context-integrity.d.ts +5 -0
- package/dist/context-integrity.d.ts.map +1 -0
- package/dist/context-integrity.js +5 -0
- package/dist/context-integrity.js.map +1 -0
- package/dist/governed-role-evolution.d.ts +172 -0
- package/dist/governed-role-evolution.d.ts.map +1 -0
- package/dist/governed-role-evolution.js +613 -0
- package/dist/governed-role-evolution.js.map +1 -0
- package/dist/heterogeneous-agent-composition.d.ts +96 -0
- package/dist/heterogeneous-agent-composition.d.ts.map +1 -0
- package/dist/heterogeneous-agent-composition.js +512 -0
- package/dist/heterogeneous-agent-composition.js.map +1 -0
- package/dist/index.d.ts +21 -13
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +21 -13
- package/dist/index.js.map +1 -1
- package/dist/intervention-adapters.d.ts +29 -0
- package/dist/intervention-adapters.d.ts.map +1 -0
- package/dist/intervention-adapters.js +107 -0
- package/dist/intervention-adapters.js.map +1 -0
- package/dist/intervention-contracts.d.ts +311 -0
- package/dist/intervention-contracts.d.ts.map +1 -0
- package/dist/intervention-contracts.js +28 -0
- package/dist/intervention-contracts.js.map +1 -0
- package/dist/intervention-runtime.d.ts +86 -0
- package/dist/intervention-runtime.d.ts.map +1 -0
- package/dist/intervention-runtime.js +958 -0
- package/dist/intervention-runtime.js.map +1 -0
- package/dist/intervention-validation.d.ts +27 -0
- package/dist/intervention-validation.d.ts.map +1 -0
- package/dist/intervention-validation.js +273 -0
- package/dist/intervention-validation.js.map +1 -0
- package/dist/intervention.d.ts +6 -0
- package/dist/intervention.d.ts.map +1 -0
- package/dist/intervention.js +6 -0
- package/dist/intervention.js.map +1 -0
- package/dist/model.d.ts +18 -0
- package/dist/model.d.ts.map +1 -1
- package/dist/model.js +60 -2
- package/dist/model.js.map +1 -1
- package/dist/operational-cognitive-control.d.ts +208 -0
- package/dist/operational-cognitive-control.d.ts.map +1 -0
- package/dist/operational-cognitive-control.js +590 -0
- package/dist/operational-cognitive-control.js.map +1 -0
- package/dist/portable-agent.d.ts +50 -0
- package/dist/portable-agent.d.ts.map +1 -0
- package/dist/portable-agent.js +243 -0
- package/dist/portable-agent.js.map +1 -0
- package/dist/reference-controllers.d.ts +121 -0
- package/dist/reference-controllers.d.ts.map +1 -0
- package/dist/reference-controllers.js +411 -0
- package/dist/reference-controllers.js.map +1 -0
- package/dist/role-alignment-portable-agent.d.ts +145 -0
- package/dist/role-alignment-portable-agent.d.ts.map +1 -0
- package/dist/role-alignment-portable-agent.js +484 -0
- package/dist/role-alignment-portable-agent.js.map +1 -0
- package/dist/role-alignment.d.ts +226 -0
- package/dist/role-alignment.d.ts.map +1 -0
- package/dist/role-alignment.js +1074 -0
- package/dist/role-alignment.js.map +1 -0
- package/dist/role-realignment-portable-agent.d.ts +163 -0
- package/dist/role-realignment-portable-agent.d.ts.map +1 -0
- package/dist/role-realignment-portable-agent.js +634 -0
- package/dist/role-realignment-portable-agent.js.map +1 -0
- package/dist/role-realignment.d.ts +368 -0
- package/dist/role-realignment.d.ts.map +1 -0
- package/dist/role-realignment.js +1609 -0
- package/dist/role-realignment.js.map +1 -0
- package/dist/semantic-alignment-assessors.d.ts +12 -0
- package/dist/semantic-alignment-assessors.d.ts.map +1 -0
- package/dist/semantic-alignment-assessors.js +55 -0
- package/dist/semantic-alignment-assessors.js.map +1 -0
- package/dist/semantic-alignment-contracts.d.ts +385 -0
- package/dist/semantic-alignment-contracts.d.ts.map +1 -0
- package/dist/semantic-alignment-contracts.js +16 -0
- package/dist/semantic-alignment-contracts.js.map +1 -0
- package/dist/semantic-alignment-memory.d.ts +53 -0
- package/dist/semantic-alignment-memory.d.ts.map +1 -0
- package/dist/semantic-alignment-memory.js +170 -0
- package/dist/semantic-alignment-memory.js.map +1 -0
- package/dist/semantic-alignment-runtime.d.ts +67 -0
- package/dist/semantic-alignment-runtime.d.ts.map +1 -0
- package/dist/semantic-alignment-runtime.js +778 -0
- package/dist/semantic-alignment-runtime.js.map +1 -0
- package/dist/semantic-alignment-validation.d.ts +31 -0
- package/dist/semantic-alignment-validation.d.ts.map +1 -0
- package/dist/semantic-alignment-validation.js +477 -0
- package/dist/semantic-alignment-validation.js.map +1 -0
- package/dist/semantic-alignment.d.ts +8 -0
- package/dist/semantic-alignment.d.ts.map +1 -0
- package/dist/semantic-alignment.js +8 -0
- package/dist/semantic-alignment.js.map +1 -0
- package/dist/semantic-horizon-budget.d.ts +118 -0
- package/dist/semantic-horizon-budget.d.ts.map +1 -0
- package/dist/semantic-horizon-budget.js +536 -0
- package/dist/semantic-horizon-budget.js.map +1 -0
- package/dist/semantic-metric-engine.d.ts +96 -0
- package/dist/semantic-metric-engine.d.ts.map +1 -0
- package/dist/semantic-metric-engine.js +396 -0
- package/dist/semantic-metric-engine.js.map +1 -0
- package/package.json +79 -7
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
import type { JsonValue } from "@agentplat/core";
|
|
2
|
+
import { type PortableAgentAdapterManifestV1, type PortableAgentAdapterV1, type PortableAgentControlPortV1, type PortableAgentControlRequestV1, type PortableAgentObservationV1 } from "@agentplat/runtime/adapter";
|
|
3
|
+
import { type ContextIntegrityDecisionV1, type ContextIntegrityFilterBindingV1, type ContextIntegrityHandoffEnvelopeV1, type ContextIntegrityMemoryTierV1, type ContextIntegrityPortV1, type ContextIntegrityRequestV1, type ContextIntegritySourceZoneV1, type ContextIntegrityStateV1 } from "./context-integrity-contracts.js";
|
|
4
|
+
export interface ContextIntegrityPortableReferenceResolutionV1 {
|
|
5
|
+
readonly content: JsonValue;
|
|
6
|
+
readonly contentDigest: string;
|
|
7
|
+
}
|
|
8
|
+
export interface ContextIntegrityPortableReferenceResolverV1 {
|
|
9
|
+
resolve(input: {
|
|
10
|
+
readonly reference: NonNullable<PortableAgentObservationV1["contentReference"]>;
|
|
11
|
+
readonly checkpoint: "pre_step" | "post_output";
|
|
12
|
+
readonly target: PortableAgentControlRequestV1;
|
|
13
|
+
}): Promise<ContextIntegrityPortableReferenceResolutionV1> | ContextIntegrityPortableReferenceResolutionV1;
|
|
14
|
+
}
|
|
15
|
+
export interface ContextIntegrityPortableClassificationV1 {
|
|
16
|
+
readonly memoryTier: ContextIntegrityMemoryTierV1;
|
|
17
|
+
readonly claimKeyDigest: string | null;
|
|
18
|
+
readonly claimValueDigest: string | null;
|
|
19
|
+
readonly corroborationGroupIds: readonly string[];
|
|
20
|
+
}
|
|
21
|
+
export interface ContextIntegrityPortableScopeV1 {
|
|
22
|
+
readonly tenantId: string;
|
|
23
|
+
readonly sessionId: string;
|
|
24
|
+
readonly agentId: string;
|
|
25
|
+
readonly objectiveId: string;
|
|
26
|
+
}
|
|
27
|
+
export interface ContextIntegrityPortableAgentBundleOptionsV1 {
|
|
28
|
+
readonly controller: ContextIntegrityPortV1;
|
|
29
|
+
readonly controlId: string;
|
|
30
|
+
readonly controlVersion: number;
|
|
31
|
+
readonly controlImplementationId: string;
|
|
32
|
+
readonly manifest: PortableAgentAdapterManifestV1;
|
|
33
|
+
readonly adapter: PortableAgentAdapterV1;
|
|
34
|
+
readonly wrapperImplementationId: string;
|
|
35
|
+
readonly filterId: string;
|
|
36
|
+
readonly filterVersion: number;
|
|
37
|
+
readonly filterImplementationDigest: string;
|
|
38
|
+
readonly itemTtlMs: number;
|
|
39
|
+
readonly referenceResolver?: ContextIntegrityPortableReferenceResolverV1;
|
|
40
|
+
readonly classify?: (input: {
|
|
41
|
+
readonly itemKind: "observation" | "output" | "action";
|
|
42
|
+
readonly sourceZone: ContextIntegritySourceZoneV1;
|
|
43
|
+
readonly sourceId: string;
|
|
44
|
+
readonly target: PortableAgentControlRequestV1;
|
|
45
|
+
}) => ContextIntegrityPortableClassificationV1;
|
|
46
|
+
readonly stateKey?: (scope: ContextIntegrityPortableScopeV1) => string;
|
|
47
|
+
}
|
|
48
|
+
export interface ContextIntegrityPortableEvaluationV1 {
|
|
49
|
+
readonly request: ContextIntegrityRequestV1;
|
|
50
|
+
readonly decision: ContextIntegrityDecisionV1;
|
|
51
|
+
}
|
|
52
|
+
export interface ContextIntegrityPortableAgentControlV1 extends PortableAgentControlPortV1 {
|
|
53
|
+
readonly filterBinding: ContextIntegrityFilterBindingV1;
|
|
54
|
+
readonly adapterBinding: Readonly<{
|
|
55
|
+
readonly adapterId: string;
|
|
56
|
+
readonly adapterVersion: string;
|
|
57
|
+
readonly implementationId: string;
|
|
58
|
+
}>;
|
|
59
|
+
evaluateIntegrity(target: PortableAgentControlRequestV1): Promise<ContextIntegrityPortableEvaluationV1>;
|
|
60
|
+
stateKeyFor(scope: ContextIntegrityPortableScopeV1): string;
|
|
61
|
+
exportHandoff(input: {
|
|
62
|
+
readonly source: ContextIntegrityPortableScopeV1;
|
|
63
|
+
readonly target: ContextIntegrityPortableScopeV1;
|
|
64
|
+
readonly logicalTimeMs: number;
|
|
65
|
+
}): Promise<ContextIntegrityHandoffEnvelopeV1>;
|
|
66
|
+
importHandoff(input: {
|
|
67
|
+
readonly handoff: ContextIntegrityHandoffEnvelopeV1;
|
|
68
|
+
readonly target: ContextIntegrityPortableScopeV1;
|
|
69
|
+
readonly logicalTimeMs: number;
|
|
70
|
+
}): Promise<ContextIntegrityStateV1>;
|
|
71
|
+
}
|
|
72
|
+
export interface ContextIntegrityPortableAgentBundleV1 {
|
|
73
|
+
readonly manifest: PortableAgentAdapterManifestV1;
|
|
74
|
+
readonly adapter: PortableAgentAdapterV1;
|
|
75
|
+
readonly control: ContextIntegrityPortableAgentControlV1;
|
|
76
|
+
readonly filterBinding: ContextIntegrityFilterBindingV1;
|
|
77
|
+
}
|
|
78
|
+
export declare function createContextIntegrityPortableAgentBundleV1(options: ContextIntegrityPortableAgentBundleOptionsV1): ContextIntegrityPortableAgentBundleV1;
|
|
79
|
+
//# sourceMappingURL=context-integrity-portable-agent.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"context-integrity-portable-agent.d.ts","sourceRoot":"","sources":["../src/context-integrity-portable-agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAEL,KAAK,8BAA8B,EACnC,KAAK,sBAAsB,EAG3B,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAGhC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,iCAAiC,EAEtC,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAE9B,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC7B,MAAM,kCAAkC,CAAC;AAgB1C,MAAM,WAAW,6CAA6C;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,2CAA2C;IAC1D,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,SAAS,EAAE,WAAW,CAC7B,0BAA0B,CAAC,kBAAkB,CAAC,CAC/C,CAAC;QACF,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,aAAa,CAAC;QAChD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;KAChD,GACG,OAAO,CAAC,6CAA6C,CAAC,GACtD,6CAA6C,CAAC;CACnD;AAED,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2CAA2C,CAAC;IACzE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;QACvD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;QAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;KAChD,KAAK,wCAAwC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,+BAA+B,KAAK,MAAM,CAAC;CACxE;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED,MAAM,WAAW,sCAAuC,SAAQ,0BAA0B;IACxF,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC;QAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;IACH,iBAAiB,CACf,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjD,WAAW,CAAC,KAAK,EAAE,+BAA+B,GAAG,MAAM,CAAC;IAC5D,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;QACjD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;QACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/C,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;QACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;CACzD;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,4CAA4C,GACpD,qCAAqC,CAkDvC"}
|
|
@@ -0,0 +1,511 @@
|
|
|
1
|
+
import { normalizeAdapterManifestV1, } from "@agentplat/runtime/adapter";
|
|
2
|
+
import { digestControlJsonV1 } from "./canonical.js";
|
|
3
|
+
import { CONTEXT_INTEGRITY_SCHEMA_VERSION_V1, } from "./context-integrity-contracts.js";
|
|
4
|
+
import { createContextIntegrityEphemeralContentV1, createContextIntegrityFilterBindingV1, createContextIntegrityItemV1, createContextIntegrityRequestV1, digestContextIntegrityJsonV1, validateContextIntegrityDecisionV1, } from "./context-integrity-runtime.js";
|
|
5
|
+
import { assertDigest, assertIdentifier, assertSafeInteger, deepFreeze, } from "./validation.js";
|
|
6
|
+
export function createContextIntegrityPortableAgentBundleV1(options) {
|
|
7
|
+
if (!options || typeof options !== "object")
|
|
8
|
+
fail("context_integrity_portable_bundle_options_required");
|
|
9
|
+
const controller = normalizeController(options.controller);
|
|
10
|
+
const sourceManifest = normalizeAdapterManifestV1(options.manifest);
|
|
11
|
+
if (!options.adapter || typeof options.adapter.step !== "function")
|
|
12
|
+
fail("context_integrity_portable_adapter_required");
|
|
13
|
+
const wrapperImplementationId = identifier(options.wrapperImplementationId, "wrapperImplementationId");
|
|
14
|
+
if (wrapperImplementationId === sourceManifest.implementationId)
|
|
15
|
+
fail("context_integrity_wrapper_implementation_must_change");
|
|
16
|
+
const manifest = normalizeAdapterManifestV1({
|
|
17
|
+
...sourceManifest,
|
|
18
|
+
implementationId: wrapperImplementationId,
|
|
19
|
+
});
|
|
20
|
+
const itemTtlMs = positive(options.itemTtlMs, "itemTtlMs");
|
|
21
|
+
if (options.referenceResolver !== undefined &&
|
|
22
|
+
typeof options.referenceResolver.resolve !== "function")
|
|
23
|
+
fail("context_integrity_reference_resolver_invalid");
|
|
24
|
+
if (options.classify !== undefined && typeof options.classify !== "function")
|
|
25
|
+
fail("context_integrity_portable_classifier_invalid");
|
|
26
|
+
if (options.stateKey !== undefined && typeof options.stateKey !== "function")
|
|
27
|
+
fail("context_integrity_portable_state_key_invalid");
|
|
28
|
+
const filterBinding = createContextIntegrityFilterBindingV1({
|
|
29
|
+
schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
|
|
30
|
+
filterId: identifier(options.filterId, "filterId"),
|
|
31
|
+
filterVersion: positive(options.filterVersion, "filterVersion"),
|
|
32
|
+
filterImplementationDigest: digest(options.filterImplementationDigest, "filterImplementationDigest"),
|
|
33
|
+
});
|
|
34
|
+
const control = createPortableControl({
|
|
35
|
+
options,
|
|
36
|
+
controller,
|
|
37
|
+
manifest,
|
|
38
|
+
filterBinding,
|
|
39
|
+
itemTtlMs,
|
|
40
|
+
});
|
|
41
|
+
const adapter = createFilteringAdapter({
|
|
42
|
+
sourceManifest,
|
|
43
|
+
manifest,
|
|
44
|
+
sourceAdapter: options.adapter,
|
|
45
|
+
control,
|
|
46
|
+
});
|
|
47
|
+
return deepFreeze({ manifest, adapter, control, filterBinding });
|
|
48
|
+
}
|
|
49
|
+
function createPortableControl(input) {
|
|
50
|
+
const controlId = identifier(input.options.controlId, "controlId");
|
|
51
|
+
const controlVersion = positive(input.options.controlVersion, "controlVersion");
|
|
52
|
+
const implementationId = identifier(input.options.controlImplementationId, "controlImplementationId");
|
|
53
|
+
const adapterBinding = deepFreeze({
|
|
54
|
+
adapterId: input.manifest.adapterId,
|
|
55
|
+
adapterVersion: input.manifest.adapterVersion,
|
|
56
|
+
implementationId: input.manifest.implementationId,
|
|
57
|
+
});
|
|
58
|
+
const stateKeyFor = (scopeInput) => {
|
|
59
|
+
const scope = normalizePortableScope(scopeInput);
|
|
60
|
+
if (input.options.stateKey)
|
|
61
|
+
return identifier(input.options.stateKey(scope), "stateKey");
|
|
62
|
+
const keyDigest = digestContextIntegrityJsonV1("state", scope);
|
|
63
|
+
return `context-integrity-state.${keyDigest.slice(7)}`;
|
|
64
|
+
};
|
|
65
|
+
const evaluateIntegrity = async (target) => {
|
|
66
|
+
assertPortableBinding(target, input.manifest);
|
|
67
|
+
const mapped = await mapPortableTarget({
|
|
68
|
+
target,
|
|
69
|
+
filterBinding: input.filterBinding,
|
|
70
|
+
itemTtlMs: input.itemTtlMs,
|
|
71
|
+
referenceResolver: input.options.referenceResolver,
|
|
72
|
+
classify: input.options.classify,
|
|
73
|
+
});
|
|
74
|
+
const decision = validateContextIntegrityDecisionV1({
|
|
75
|
+
decision: await input.controller.evaluate({
|
|
76
|
+
stateKey: stateKeyFor(mapped.request.scope),
|
|
77
|
+
request: mapped.request,
|
|
78
|
+
contents: mapped.contents,
|
|
79
|
+
}),
|
|
80
|
+
request: mapped.request,
|
|
81
|
+
expected: input.controller,
|
|
82
|
+
logicalTimeMs: mapped.request.logicalTimeMs,
|
|
83
|
+
});
|
|
84
|
+
return deepFreeze({ request: mapped.request, decision });
|
|
85
|
+
};
|
|
86
|
+
return deepFreeze({
|
|
87
|
+
controlId,
|
|
88
|
+
controlVersion,
|
|
89
|
+
implementationId,
|
|
90
|
+
filterBinding: input.filterBinding,
|
|
91
|
+
adapterBinding,
|
|
92
|
+
async evaluate(target) {
|
|
93
|
+
try {
|
|
94
|
+
const { decision } = await evaluateIntegrity(target);
|
|
95
|
+
if (decision.disposition === "allow")
|
|
96
|
+
return allow(decision.filterRequired
|
|
97
|
+
? "context_integrity_filter_authorized"
|
|
98
|
+
: "context_integrity_allowed");
|
|
99
|
+
return deepFreeze({
|
|
100
|
+
disposition: decision.disposition,
|
|
101
|
+
reasonCode: decision.disposition === "deny"
|
|
102
|
+
? "context_integrity_denied"
|
|
103
|
+
: "context_integrity_abstained",
|
|
104
|
+
});
|
|
105
|
+
}
|
|
106
|
+
catch {
|
|
107
|
+
return deny("context_integrity_control_unavailable");
|
|
108
|
+
}
|
|
109
|
+
},
|
|
110
|
+
evaluateIntegrity,
|
|
111
|
+
stateKeyFor,
|
|
112
|
+
exportHandoff({ source, target, logicalTimeMs }) {
|
|
113
|
+
return input.controller.exportHandoff({
|
|
114
|
+
sourceStateKey: stateKeyFor(source),
|
|
115
|
+
targetStateKey: stateKeyFor(target),
|
|
116
|
+
logicalTimeMs,
|
|
117
|
+
});
|
|
118
|
+
},
|
|
119
|
+
importHandoff({ handoff, target, logicalTimeMs }) {
|
|
120
|
+
const targetStateKey = stateKeyFor(target);
|
|
121
|
+
return input.controller.importHandoff({
|
|
122
|
+
handoff,
|
|
123
|
+
targetStateKey,
|
|
124
|
+
logicalTimeMs,
|
|
125
|
+
});
|
|
126
|
+
},
|
|
127
|
+
});
|
|
128
|
+
}
|
|
129
|
+
async function mapPortableTarget(input) {
|
|
130
|
+
const { target } = input;
|
|
131
|
+
const logicalTimeMs = nonNegative(target.request.logicalTimeMs, "request.logicalTimeMs");
|
|
132
|
+
const scope = normalizePortableScope({
|
|
133
|
+
tenantId: target.tenantId,
|
|
134
|
+
sessionId: target.sessionId,
|
|
135
|
+
agentId: target.agentId,
|
|
136
|
+
objectiveId: target.role.objectiveId,
|
|
137
|
+
});
|
|
138
|
+
const mapped = [];
|
|
139
|
+
if (target.checkpoint === "pre_step") {
|
|
140
|
+
for (const observation of target.request.observations) {
|
|
141
|
+
const value = await portableContent({
|
|
142
|
+
inline: observation.content,
|
|
143
|
+
reference: observation.contentReference,
|
|
144
|
+
resolver: input.referenceResolver,
|
|
145
|
+
checkpoint: "pre_step",
|
|
146
|
+
target,
|
|
147
|
+
});
|
|
148
|
+
const content = createContextIntegrityEphemeralContentV1({
|
|
149
|
+
itemId: observation.observationId,
|
|
150
|
+
mediaType: typeof value === "string" ? "text" : "json",
|
|
151
|
+
content: value,
|
|
152
|
+
});
|
|
153
|
+
const sourceZone = sourceZoneForPortable(observation.sourceZone);
|
|
154
|
+
mapped.push({
|
|
155
|
+
content,
|
|
156
|
+
item: itemForPortableTarget({
|
|
157
|
+
itemId: observation.observationId,
|
|
158
|
+
sourceZone,
|
|
159
|
+
sourceId: observation.sourceId,
|
|
160
|
+
sourceRevision: observation.observedAtLogicalMs,
|
|
161
|
+
observedAtLogicalMs: observation.observedAtLogicalMs,
|
|
162
|
+
provenanceDigest: digestControlJsonV1("provenance", {
|
|
163
|
+
sourceZone: observation.sourceZone,
|
|
164
|
+
sourceId: observation.sourceId,
|
|
165
|
+
provenance: observation.provenance,
|
|
166
|
+
contentReference: observation.contentReference,
|
|
167
|
+
}),
|
|
168
|
+
content,
|
|
169
|
+
classification: input.classify?.({
|
|
170
|
+
itemKind: "observation",
|
|
171
|
+
sourceZone,
|
|
172
|
+
sourceId: observation.sourceId,
|
|
173
|
+
target,
|
|
174
|
+
}) ??
|
|
175
|
+
defaultPortableClassification(sourceZone, observation.sourceId),
|
|
176
|
+
itemTtlMs: input.itemTtlMs,
|
|
177
|
+
}),
|
|
178
|
+
});
|
|
179
|
+
}
|
|
180
|
+
}
|
|
181
|
+
else if (target.checkpoint === "post_output") {
|
|
182
|
+
if (!target.output)
|
|
183
|
+
fail("context_integrity_output_missing");
|
|
184
|
+
const value = await portableContent({
|
|
185
|
+
inline: target.output.content,
|
|
186
|
+
reference: target.output.contentReference,
|
|
187
|
+
resolver: input.referenceResolver,
|
|
188
|
+
checkpoint: "post_output",
|
|
189
|
+
target,
|
|
190
|
+
});
|
|
191
|
+
const content = createContextIntegrityEphemeralContentV1({
|
|
192
|
+
itemId: target.output.outputId,
|
|
193
|
+
mediaType: typeof value === "string" ? "text" : "json",
|
|
194
|
+
content: value,
|
|
195
|
+
});
|
|
196
|
+
const sourceZone = "provider_untrusted";
|
|
197
|
+
mapped.push({
|
|
198
|
+
content,
|
|
199
|
+
item: itemForPortableTarget({
|
|
200
|
+
itemId: target.output.outputId,
|
|
201
|
+
sourceZone,
|
|
202
|
+
sourceId: target.manifest.adapterId,
|
|
203
|
+
sourceRevision: target.stepSequence,
|
|
204
|
+
observedAtLogicalMs: logicalTimeMs,
|
|
205
|
+
provenanceDigest: digestControlJsonV1("provenance", {
|
|
206
|
+
adapterId: target.manifest.adapterId,
|
|
207
|
+
adapterVersion: target.manifest.adapterVersion,
|
|
208
|
+
implementationId: target.manifest.implementationId,
|
|
209
|
+
metadata: target.output.metadata,
|
|
210
|
+
contentReference: target.output.contentReference,
|
|
211
|
+
}),
|
|
212
|
+
content,
|
|
213
|
+
classification: input.classify?.({
|
|
214
|
+
itemKind: "output",
|
|
215
|
+
sourceZone,
|
|
216
|
+
sourceId: target.manifest.adapterId,
|
|
217
|
+
target,
|
|
218
|
+
}) ??
|
|
219
|
+
defaultPortableClassification(sourceZone, target.manifest.adapterId),
|
|
220
|
+
itemTtlMs: input.itemTtlMs,
|
|
221
|
+
}),
|
|
222
|
+
});
|
|
223
|
+
}
|
|
224
|
+
else {
|
|
225
|
+
if (!target.actionProposal)
|
|
226
|
+
fail("context_integrity_action_missing");
|
|
227
|
+
const content = createContextIntegrityEphemeralContentV1({
|
|
228
|
+
itemId: target.actionProposal.actionId,
|
|
229
|
+
mediaType: "json",
|
|
230
|
+
content: target.actionProposal.input,
|
|
231
|
+
});
|
|
232
|
+
const sourceZone = "provider_untrusted";
|
|
233
|
+
mapped.push({
|
|
234
|
+
content,
|
|
235
|
+
item: itemForPortableTarget({
|
|
236
|
+
itemId: target.actionProposal.actionId,
|
|
237
|
+
sourceZone,
|
|
238
|
+
sourceId: target.manifest.adapterId,
|
|
239
|
+
sourceRevision: target.stepSequence,
|
|
240
|
+
observedAtLogicalMs: logicalTimeMs,
|
|
241
|
+
provenanceDigest: digestControlJsonV1("provenance", {
|
|
242
|
+
adapterId: target.manifest.adapterId,
|
|
243
|
+
adapterVersion: target.manifest.adapterVersion,
|
|
244
|
+
implementationId: target.manifest.implementationId,
|
|
245
|
+
actionClass: target.actionProposal.actionClass,
|
|
246
|
+
riskClass: target.actionProposal.riskClass,
|
|
247
|
+
metadata: target.actionProposal.metadata,
|
|
248
|
+
}),
|
|
249
|
+
content,
|
|
250
|
+
classification: input.classify?.({
|
|
251
|
+
itemKind: "action",
|
|
252
|
+
sourceZone,
|
|
253
|
+
sourceId: target.manifest.adapterId,
|
|
254
|
+
target,
|
|
255
|
+
}) ??
|
|
256
|
+
defaultPortableClassification(sourceZone, target.manifest.adapterId),
|
|
257
|
+
itemTtlMs: input.itemTtlMs,
|
|
258
|
+
}),
|
|
259
|
+
});
|
|
260
|
+
}
|
|
261
|
+
const checkpoint = target.checkpoint === "pre_step"
|
|
262
|
+
? "pre_step"
|
|
263
|
+
: target.checkpoint === "post_output"
|
|
264
|
+
? "post_output"
|
|
265
|
+
: "pre_action";
|
|
266
|
+
const targetKind = checkpoint === "pre_step"
|
|
267
|
+
? "context"
|
|
268
|
+
: checkpoint === "post_output"
|
|
269
|
+
? "output"
|
|
270
|
+
: "action";
|
|
271
|
+
const filterBindingDigest = checkpoint === "pre_step" ? input.filterBinding.filterBindingDigest : null;
|
|
272
|
+
const requestSeed = deepFreeze({
|
|
273
|
+
checkpoint,
|
|
274
|
+
stepSequence: target.stepSequence,
|
|
275
|
+
checkpointItemIndex: target.checkpointItemIndex ?? 0,
|
|
276
|
+
targetKind,
|
|
277
|
+
scope,
|
|
278
|
+
logicalTimeMs,
|
|
279
|
+
filterBindingDigest,
|
|
280
|
+
itemDigests: mapped.map(({ item }) => item.itemDigest),
|
|
281
|
+
});
|
|
282
|
+
const requestIdDigest = digestContextIntegrityJsonV1("request", requestSeed);
|
|
283
|
+
return deepFreeze({
|
|
284
|
+
request: createContextIntegrityRequestV1({
|
|
285
|
+
schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
|
|
286
|
+
requestId: `context-integrity-request.${requestIdDigest.slice(7)}`,
|
|
287
|
+
checkpoint,
|
|
288
|
+
targetKind,
|
|
289
|
+
scope,
|
|
290
|
+
logicalTimeMs,
|
|
291
|
+
filterBindingDigest,
|
|
292
|
+
items: mapped.map(({ item }) => item),
|
|
293
|
+
}),
|
|
294
|
+
contents: mapped.map(({ content }) => content),
|
|
295
|
+
});
|
|
296
|
+
}
|
|
297
|
+
function itemForPortableTarget(input) {
|
|
298
|
+
return createContextIntegrityItemV1({
|
|
299
|
+
schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
|
|
300
|
+
itemId: input.itemId,
|
|
301
|
+
sourceZone: input.sourceZone,
|
|
302
|
+
sourceId: input.sourceId,
|
|
303
|
+
sourceVersion: 1,
|
|
304
|
+
sourceRevision: input.sourceRevision,
|
|
305
|
+
memoryTier: input.classification.memoryTier,
|
|
306
|
+
contentDigest: input.content.contentDigest,
|
|
307
|
+
provenanceDigest: input.provenanceDigest,
|
|
308
|
+
claimKeyDigest: input.classification.claimKeyDigest,
|
|
309
|
+
claimValueDigest: input.classification.claimValueDigest,
|
|
310
|
+
corroborationGroupIds: input.classification.corroborationGroupIds,
|
|
311
|
+
observedAtLogicalMs: input.observedAtLogicalMs,
|
|
312
|
+
expiresAtLogicalMs: safeAdd(input.observedAtLogicalMs, input.itemTtlMs, "context_integrity_item_expiry_overflow"),
|
|
313
|
+
});
|
|
314
|
+
}
|
|
315
|
+
async function portableContent(input) {
|
|
316
|
+
if (input.inline !== null)
|
|
317
|
+
return input.inline;
|
|
318
|
+
if (!input.reference || !input.resolver)
|
|
319
|
+
fail("context_integrity_referenced_content_unavailable");
|
|
320
|
+
const resolved = await input.resolver.resolve({
|
|
321
|
+
reference: input.reference,
|
|
322
|
+
checkpoint: input.checkpoint,
|
|
323
|
+
target: input.target,
|
|
324
|
+
});
|
|
325
|
+
if (!resolved ||
|
|
326
|
+
typeof resolved !== "object" ||
|
|
327
|
+
resolved.contentDigest !== input.reference.contentDigest)
|
|
328
|
+
fail("context_integrity_referenced_content_binding_invalid");
|
|
329
|
+
digest(resolved.contentDigest, "resolved.contentDigest");
|
|
330
|
+
return resolved.content;
|
|
331
|
+
}
|
|
332
|
+
function createFilteringAdapter(input) {
|
|
333
|
+
const adapter = {
|
|
334
|
+
async step(stepInput, context) {
|
|
335
|
+
const target = {
|
|
336
|
+
schemaVersion: 1,
|
|
337
|
+
checkpoint: "pre_step",
|
|
338
|
+
stepSequence: stepInput.stepSequence,
|
|
339
|
+
manifest: input.manifest,
|
|
340
|
+
sessionId: stepInput.sessionId,
|
|
341
|
+
tenantId: stepInput.tenantId,
|
|
342
|
+
agentId: stepInput.agentId,
|
|
343
|
+
role: stepInput.role,
|
|
344
|
+
request: stepInput.request,
|
|
345
|
+
output: null,
|
|
346
|
+
actionProposal: null,
|
|
347
|
+
};
|
|
348
|
+
const { decision } = await input.control.evaluateIntegrity(target);
|
|
349
|
+
if (decision.disposition !== "allow")
|
|
350
|
+
fail(`context_integrity_${decision.disposition}`);
|
|
351
|
+
const admittedIds = new Set(decision.items
|
|
352
|
+
.filter(({ action }) => action === "admit" || action === "restrict")
|
|
353
|
+
.map(({ itemId }) => itemId));
|
|
354
|
+
const filteredObservations = stepInput.request.observations.filter(({ observationId }) => admittedIds.has(observationId));
|
|
355
|
+
if (!decision.filterRequired &&
|
|
356
|
+
filteredObservations.length !== stepInput.request.observations.length)
|
|
357
|
+
fail("context_integrity_filter_binding_invalid");
|
|
358
|
+
const result = await input.sourceAdapter.step({
|
|
359
|
+
...stepInput,
|
|
360
|
+
request: deepFreeze({
|
|
361
|
+
...stepInput.request,
|
|
362
|
+
observations: deepFreeze(filteredObservations),
|
|
363
|
+
}),
|
|
364
|
+
previousCheckpoint: checkpointForImplementation(stepInput.previousCheckpoint, input.sourceManifest.implementationId),
|
|
365
|
+
}, context);
|
|
366
|
+
return deepFreeze({
|
|
367
|
+
...result,
|
|
368
|
+
checkpoint: checkpointForImplementation(result.checkpoint, input.manifest.implementationId),
|
|
369
|
+
});
|
|
370
|
+
},
|
|
371
|
+
...(input.sourceAdapter.checkpoint
|
|
372
|
+
? {
|
|
373
|
+
checkpoint: async (checkpointInput, context) => checkpointForImplementation(await input.sourceAdapter.checkpoint({
|
|
374
|
+
...checkpointInput,
|
|
375
|
+
previousCheckpoint: checkpointForImplementation(checkpointInput.previousCheckpoint, input.sourceManifest.implementationId),
|
|
376
|
+
}, context), input.manifest.implementationId),
|
|
377
|
+
}
|
|
378
|
+
: {}),
|
|
379
|
+
...(input.sourceAdapter.restore
|
|
380
|
+
? {
|
|
381
|
+
restore: async (restoreInput, context) => input.sourceAdapter.restore({
|
|
382
|
+
...restoreInput,
|
|
383
|
+
checkpoint: checkpointForImplementation(restoreInput.checkpoint, input.sourceManifest.implementationId),
|
|
384
|
+
}, context),
|
|
385
|
+
}
|
|
386
|
+
: {}),
|
|
387
|
+
...(input.sourceAdapter.exportCheckpoint
|
|
388
|
+
? {
|
|
389
|
+
exportCheckpoint: async (exportInput, context) => input.sourceAdapter.exportCheckpoint({
|
|
390
|
+
...exportInput,
|
|
391
|
+
checkpoint: checkpointForImplementation(exportInput.checkpoint, input.sourceManifest.implementationId),
|
|
392
|
+
}, context),
|
|
393
|
+
}
|
|
394
|
+
: {}),
|
|
395
|
+
...(input.sourceAdapter.importCheckpoint
|
|
396
|
+
? {
|
|
397
|
+
importCheckpoint: async (importInput, context) => checkpointForImplementation(await input.sourceAdapter.importCheckpoint({
|
|
398
|
+
...importInput,
|
|
399
|
+
transfer: transferForImplementation(importInput.transfer, input.sourceManifest.implementationId),
|
|
400
|
+
}, context), input.manifest.implementationId),
|
|
401
|
+
}
|
|
402
|
+
: {}),
|
|
403
|
+
};
|
|
404
|
+
return adapter;
|
|
405
|
+
}
|
|
406
|
+
function checkpointForImplementation(checkpoint, implementationId) {
|
|
407
|
+
return checkpoint === null
|
|
408
|
+
? null
|
|
409
|
+
: deepFreeze({ ...checkpoint, implementationId });
|
|
410
|
+
}
|
|
411
|
+
function transferForImplementation(transfer, implementationId) {
|
|
412
|
+
return deepFreeze({
|
|
413
|
+
...transfer,
|
|
414
|
+
implementationId,
|
|
415
|
+
checkpoint: checkpointForImplementation(transfer.checkpoint, implementationId),
|
|
416
|
+
});
|
|
417
|
+
}
|
|
418
|
+
function assertPortableBinding(target, manifest) {
|
|
419
|
+
if (!target ||
|
|
420
|
+
target.schemaVersion !== 1 ||
|
|
421
|
+
target.manifest.adapterId !== manifest.adapterId ||
|
|
422
|
+
target.manifest.adapterVersion !== manifest.adapterVersion ||
|
|
423
|
+
target.manifest.implementationId !== manifest.implementationId)
|
|
424
|
+
fail("context_integrity_portable_target_binding_invalid");
|
|
425
|
+
identifier(target.sessionId, "target.sessionId");
|
|
426
|
+
identifier(target.tenantId, "target.tenantId");
|
|
427
|
+
identifier(target.agentId, "target.agentId");
|
|
428
|
+
identifier(target.role.objectiveId, "target.role.objectiveId");
|
|
429
|
+
positive(target.stepSequence, "target.stepSequence");
|
|
430
|
+
const checkpointItemIndex = nonNegative(target.checkpointItemIndex ?? 0, "target.checkpointItemIndex");
|
|
431
|
+
if (checkpointItemIndex > 4_095 ||
|
|
432
|
+
(target.checkpoint === "pre_step" && checkpointItemIndex !== 0))
|
|
433
|
+
fail("context_integrity_checkpoint_item_index_invalid");
|
|
434
|
+
nonNegative(target.request.logicalTimeMs, "target.request.logicalTimeMs");
|
|
435
|
+
}
|
|
436
|
+
function defaultPortableClassification(sourceZone, sourceId) {
|
|
437
|
+
return deepFreeze({
|
|
438
|
+
memoryTier: sourceZone === "mission_trusted"
|
|
439
|
+
? "mission"
|
|
440
|
+
: sourceZone === "local_trusted" || sourceZone === "operator_trusted"
|
|
441
|
+
? "episodic"
|
|
442
|
+
: "working",
|
|
443
|
+
claimKeyDigest: null,
|
|
444
|
+
claimValueDigest: null,
|
|
445
|
+
corroborationGroupIds: [
|
|
446
|
+
digestContextIntegrityJsonV1("projection", { sourceZone, sourceId }),
|
|
447
|
+
],
|
|
448
|
+
});
|
|
449
|
+
}
|
|
450
|
+
function sourceZoneForPortable(zone) {
|
|
451
|
+
return zone === "objective_trusted" ? "mission_trusted" : zone;
|
|
452
|
+
}
|
|
453
|
+
function normalizePortableScope(input) {
|
|
454
|
+
return deepFreeze({
|
|
455
|
+
tenantId: identifier(input.tenantId, "scope.tenantId"),
|
|
456
|
+
sessionId: identifier(input.sessionId, "scope.sessionId"),
|
|
457
|
+
agentId: identifier(input.agentId, "scope.agentId"),
|
|
458
|
+
objectiveId: identifier(input.objectiveId, "scope.objectiveId"),
|
|
459
|
+
});
|
|
460
|
+
}
|
|
461
|
+
function normalizeController(input) {
|
|
462
|
+
if (!input ||
|
|
463
|
+
typeof input !== "object" ||
|
|
464
|
+
typeof input.evaluate !== "function" ||
|
|
465
|
+
typeof input.getState !== "function" ||
|
|
466
|
+
typeof input.exportHandoff !== "function" ||
|
|
467
|
+
typeof input.importHandoff !== "function")
|
|
468
|
+
fail("context_integrity_controller_required");
|
|
469
|
+
identifier(input.controllerId, "controller.controllerId");
|
|
470
|
+
positive(input.controllerVersion, "controller.controllerVersion");
|
|
471
|
+
identifier(input.implementationId, "controller.implementationId");
|
|
472
|
+
identifier(input.policyId, "controller.policyId");
|
|
473
|
+
positive(input.policyVersion, "controller.policyVersion");
|
|
474
|
+
digest(input.policyDigest, "controller.policyDigest");
|
|
475
|
+
identifier(input.analyzerId, "controller.analyzerId");
|
|
476
|
+
positive(input.analyzerVersion, "controller.analyzerVersion");
|
|
477
|
+
digest(input.analyzerImplementationDigest, "controller.analyzerImplementationDigest");
|
|
478
|
+
return input;
|
|
479
|
+
}
|
|
480
|
+
function allow(reasonCode) {
|
|
481
|
+
return deepFreeze({ disposition: "allow", reasonCode });
|
|
482
|
+
}
|
|
483
|
+
function deny(reasonCode) {
|
|
484
|
+
return deepFreeze({ disposition: "deny", reasonCode });
|
|
485
|
+
}
|
|
486
|
+
function identifier(input, label) {
|
|
487
|
+
assertIdentifier(input, label);
|
|
488
|
+
return input;
|
|
489
|
+
}
|
|
490
|
+
function digest(input, label) {
|
|
491
|
+
assertDigest(input, label);
|
|
492
|
+
return input;
|
|
493
|
+
}
|
|
494
|
+
function positive(input, label) {
|
|
495
|
+
assertSafeInteger(input, label, 1);
|
|
496
|
+
return input;
|
|
497
|
+
}
|
|
498
|
+
function nonNegative(input, label) {
|
|
499
|
+
assertSafeInteger(input, label, 0);
|
|
500
|
+
return input;
|
|
501
|
+
}
|
|
502
|
+
function safeAdd(left, right, reason) {
|
|
503
|
+
const result = left + right;
|
|
504
|
+
if (!Number.isSafeInteger(result))
|
|
505
|
+
fail(reason);
|
|
506
|
+
return result;
|
|
507
|
+
}
|
|
508
|
+
function fail(message) {
|
|
509
|
+
throw new TypeError(message);
|
|
510
|
+
}
|
|
511
|
+
//# sourceMappingURL=context-integrity-portable-agent.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"context-integrity-portable-agent.js","sourceRoot":"","sources":["../src/context-integrity-portable-agent.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,GAU3B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,mCAAmC,GAWpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACrC,4BAA4B,EAC5B,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,MAAM,iBAAiB,CAAC;AA0FzB,MAAM,UAAU,2CAA2C,CACzD,OAAqD;IAErD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;QAChE,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACtD,MAAM,uBAAuB,GAAG,UAAU,CACxC,OAAO,CAAC,uBAAuB,EAC/B,yBAAyB,CAC1B,CAAC;IACF,IAAI,uBAAuB,KAAK,cAAc,CAAC,gBAAgB;QAC7D,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC1C,GAAG,cAAc;QACjB,gBAAgB,EAAE,uBAAuB;KAC1C,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,IACE,OAAO,CAAC,iBAAiB,KAAK,SAAS;QACvC,OAAO,OAAO,CAAC,iBAAiB,CAAC,OAAO,KAAK,UAAU;QAEvD,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAC1E,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAC1E,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,qCAAqC,CAAC;QAC1D,aAAa,EAAE,mCAAmC;QAClD,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;QAClD,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC;QAC/D,0BAA0B,EAAE,MAAM,CAChC,OAAO,CAAC,0BAA0B,EAClC,4BAA4B,CAC7B;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,OAAO;QACP,UAAU;QACV,QAAQ;QACR,aAAa;QACb,SAAS;KACV,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,cAAc;QACd,QAAQ;QACR,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,OAAO;KACR,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAM9B;IACC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,QAAQ,CAC7B,KAAK,CAAC,OAAO,CAAC,cAAc,EAC5B,gBAAgB,CACjB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,KAAK,CAAC,OAAO,CAAC,uBAAuB,EACrC,yBAAyB,CAC1B,CAAC;IACF,MAAM,cAAc,GAAG,UAAU,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QACnC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;QAC7C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;KAClD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,UAA2C,EAAU,EAAE;QAC1E,MAAM,KAAK,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ;YACxB,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,4BAA4B,CAC5C,OAAO,EACP,KAA6B,CAC9B,CAAC;QACF,OAAO,2BAA2B,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAC7B,MAAqC,EACU,EAAE;QACjD,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,MAAM;YACN,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,iBAAiB;YAClD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;SACjC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,kCAAkC,CAAC;YAClD,QAAQ,EAAE,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;gBACxC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;YACF,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,KAAK,CAAC,UAAU;YAC1B,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa;SAC5C,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,OAAO,UAAU,CAAC;QAChB,SAAS;QACT,cAAc;QACd,gBAAgB;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc;QACd,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO;oBAClC,OAAO,KAAK,CACV,QAAQ,CAAC,cAAc;wBACrB,CAAC,CAAC,qCAAqC;wBACvC,CAAC,CAAC,2BAA2B,CAChC,CAAC;gBACJ,OAAO,UAAU,CAAC;oBAChB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,UAAU,EACR,QAAQ,CAAC,WAAW,KAAK,MAAM;wBAC7B,CAAC,CAAC,0BAA0B;wBAC5B,CAAC,CAAC,6BAA6B;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QACD,iBAAiB;QACjB,WAAW;QACX,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE;YAC7C,OAAO,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;gBACpC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC;gBACnC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC;gBACnC,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QACD,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE;YAC9C,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;gBACpC,OAAO;gBACP,cAAc;gBACd,aAAa;aACd,CAAC,CAAC;QACL,CAAC;KAC+C,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAMhC;IAMC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,aAAa,GAAG,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,aAAa,EAC5B,uBAAuB,CACxB,CAAC;IACF,MAAM,KAAK,GAAG,sBAAsB,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;KACrC,CAAC,CAAC;IACH,MAAM,MAAM,GAKP,EAAE,CAAC;IACR,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;gBAClC,MAAM,EAAE,WAAW,CAAC,OAAO;gBAC3B,SAAS,EAAE,WAAW,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,KAAK,CAAC,iBAAiB;gBACjC,UAAU,EAAE,UAAU;gBACtB,MAAM;aACP,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,wCAAwC,CAAC;gBACvD,MAAM,EAAE,WAAW,CAAC,aAAa;gBACjC,SAAS,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACtD,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,qBAAqB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO;gBACP,IAAI,EAAE,qBAAqB,CAAC;oBAC1B,MAAM,EAAE,WAAW,CAAC,aAAa;oBACjC,UAAU;oBACV,QAAQ,EAAE,WAAW,CAAC,QAAQ;oBAC9B,cAAc,EAAE,WAAW,CAAC,mBAAmB;oBAC/C,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;oBACpD,gBAAgB,EAAE,mBAAmB,CAAC,YAAY,EAAE;wBAClD,UAAU,EAAE,WAAW,CAAC,UAAU;wBAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;wBAClC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;qBACvB,CAAC;oBAC1B,OAAO;oBACP,cAAc,EACZ,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACf,QAAQ,EAAE,aAAa;wBACvB,UAAU;wBACV,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,MAAM;qBACP,CAAC;wBACF,6BAA6B,CAAC,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC;oBACjE,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YAClC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;YAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,KAAK,CAAC,iBAAiB;YACjC,UAAU,EAAE,aAAa;YACzB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,wCAAwC,CAAC;YACvD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACtD,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,oBAA6B,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO;YACP,IAAI,EAAE,qBAAqB,CAAC;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAC9B,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;gBACnC,cAAc,EAAE,MAAM,CAAC,YAAY;gBACnC,mBAAmB,EAAE,aAAa;gBAClC,gBAAgB,EAAE,mBAAmB,CAAC,YAAY,EAAE;oBAClD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACpC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;oBAC9C,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB;oBAClD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;oBAChC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;iBACzB,CAAC;gBAC1B,OAAO;gBACP,cAAc,EACZ,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACf,QAAQ,EAAE,QAAQ;oBAClB,UAAU;oBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACnC,MAAM;iBACP,CAAC;oBACF,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACtE,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,wCAAwC,CAAC;YACvD,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ;YACtC,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;SACrC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,oBAA6B,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO;YACP,IAAI,EAAE,qBAAqB,CAAC;gBAC1B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ;gBACtC,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;gBACnC,cAAc,EAAE,MAAM,CAAC,YAAY;gBACnC,mBAAmB,EAAE,aAAa;gBAClC,gBAAgB,EAAE,mBAAmB,CAAC,YAAY,EAAE;oBAClD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACpC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;oBAC9C,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,gBAAgB;oBAClD,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;oBAC9C,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,SAAS;oBAC1C,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ;iBACjB,CAAC;gBAC1B,OAAO;gBACP,cAAc,EACZ,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACf,QAAQ,EAAE,QAAQ;oBAClB,UAAU;oBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;oBACnC,MAAM;iBACP,CAAC;oBACF,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACtE,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GACd,MAAM,CAAC,UAAU,KAAK,UAAU;QAC9B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,aAAa;YACnC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,YAAY,CAAC;IACrB,MAAM,UAAU,GACd,UAAU,KAAK,UAAU;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,KAAK,aAAa;YAC5B,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ,CAAC;IACjB,MAAM,mBAAmB,GACvB,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,WAAW,GAAG,UAAU,CAAC;QAC7B,UAAU;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,CAAC;QACpD,UAAU;QACV,KAAK;QACL,aAAa;QACb,mBAAmB;QACnB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,4BAA4B,CAClD,SAAS,EACT,WAAmC,CACpC,CAAC;IACF,OAAO,UAAU,CAAC;QAChB,OAAO,EAAE,+BAA+B,CAAC;YACvC,aAAa,EAAE,mCAAmC;YAClD,SAAS,EAAE,6BAA6B,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAClE,UAAU;YACV,UAAU;YACV,KAAK;YACL,aAAa;YACb,mBAAmB;YACnB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;SACtC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAU9B;IACC,OAAO,4BAA4B,CAAC;QAClC,aAAa,EAAE,mCAAmC;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU;QAC3C,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;QAC1C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,cAAc;QACnD,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,gBAAgB;QACvD,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAC,qBAAqB;QACjE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,kBAAkB,EAAE,OAAO,CACzB,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,SAAS,EACf,wCAAwC,CACzC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAM9B;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ;QACrC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,IACE,CAAC,QAAQ;QACT,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,SAAS,CAAC,aAAa;QAExD,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAC/D,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAK/B;IACC,MAAM,OAAO,GAA2B;QACtC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO;YAC3B,MAAM,MAAM,GAAkC;gBAC5C,aAAa,EAAE,CAAC;gBAChB,UAAU,EAAE,UAAU;gBACtB,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,IAAI;aACrB,CAAC;YACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACnE,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO;gBAClC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,QAAQ,CAAC,KAAK;iBACX,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,CAAC;iBACnE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAC/B,CAAC;YACF,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAChE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CACtD,CAAC;YACF,IACE,CAAC,QAAQ,CAAC,cAAc;gBACxB,oBAAoB,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM;gBAErE,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAC3C;gBACE,GAAG,SAAS;gBACZ,OAAO,EAAE,UAAU,CAAC;oBAClB,GAAG,SAAS,CAAC,OAAO;oBACpB,YAAY,EAAE,UAAU,CAAC,oBAAoB,CAAC;iBAC/C,CAAC;gBACF,kBAAkB,EAAE,2BAA2B,CAC7C,SAAS,CAAC,kBAAkB,EAC5B,KAAK,CAAC,cAAc,CAAC,gBAAgB,CACtC;aACF,EACD,OAAO,CACR,CAAC;YACF,OAAO,UAAU,CAAC;gBAChB,GAAG,MAAM;gBACT,UAAU,EAAE,2BAA2B,CACrC,MAAM,CAAC,UAAU,EACjB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC;aACF,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU;YAChC,CAAC,CAAC;gBACE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,CAC7C,2BAA2B,CACzB,MAAM,KAAK,CAAC,aAAa,CAAC,UAAW,CACnC;oBACE,GAAG,eAAe;oBAClB,kBAAkB,EAAE,2BAA2B,CAC7C,eAAe,CAAC,kBAAkB,EAClC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CACtC;iBACF,EACD,OAAO,CACR,EACD,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAC/B;aACL;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO;YAC7B,CAAC,CAAC;gBACE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CACvC,KAAK,CAAC,aAAa,CAAC,OAAQ,CAC1B;oBACE,GAAG,YAAY;oBACf,UAAU,EAAE,2BAA2B,CACrC,YAAY,CAAC,UAAU,EACvB,KAAK,CAAC,cAAc,CAAC,gBAAgB,CACrC;iBACH,EACD,OAAO,CACR;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB;YACtC,CAAC,CAAC;gBACE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAa,CAAC,gBAAiB,CACnC;oBACE,GAAG,WAAW;oBACd,UAAU,EAAE,2BAA2B,CACrC,WAAW,CAAC,UAAU,EACtB,KAAK,CAAC,cAAc,CAAC,gBAAgB,CACrC;iBACH,EACD,OAAO,CACR;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB;YACtC,CAAC,CAAC;gBACE,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAC/C,2BAA2B,CACzB,MAAM,KAAK,CAAC,aAAa,CAAC,gBAAiB,CACzC;oBACE,GAAG,WAAW;oBACd,QAAQ,EAAE,yBAAyB,CACjC,WAAW,CAAC,QAAQ,EACpB,KAAK,CAAC,cAAc,CAAC,gBAAgB,CACtC;iBACF,EACD,OAAO,CACR,EACD,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAC/B;aACL;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAoB,EACpB,gBAAwB;IAExB,OAAO,UAAU,KAAK,IAAI;QACxB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,yBAAyB,CAChC,QAA2C,EAC3C,gBAAwB;IAExB,OAAO,UAAU,CAAC;QAChB,GAAG,QAAQ;QACX,gBAAgB;QAChB,UAAU,EAAE,2BAA2B,CACrC,QAAQ,CAAC,UAAU,EACnB,gBAAgB,CAChB;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAqC,EACrC,QAAwC;IAExC,IACE,CAAC,MAAM;QACP,MAAM,CAAC,aAAa,KAAK,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAChD,MAAM,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QAC1D,MAAM,CAAC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QAE9D,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC5D,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACjD,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/C,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC7C,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IAC/D,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;IACrD,MAAM,mBAAmB,GAAG,WAAW,CACrC,MAAM,CAAC,mBAAmB,IAAI,CAAC,EAC/B,4BAA4B,CAC7B,CAAC;IACF,IACE,mBAAmB,GAAG,KAAK;QAC3B,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,IAAI,mBAAmB,KAAK,CAAC,CAAC;QAE/D,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC1D,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,6BAA6B,CACpC,UAAwC,EACxC,QAAgB;IAEhB,OAAO,UAAU,CAAC;QAChB,UAAU,EACR,UAAU,KAAK,iBAAiB;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,UAAU,KAAK,eAAe,IAAI,UAAU,KAAK,kBAAkB;gBACnE,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS;QACjB,cAAc,EAAE,IAAI;QACpB,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE;YACrB,4BAA4B,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;SACrE;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAA+B;IAE/B,OAAO,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAsC;IAEtC,OAAO,UAAU,CAAC;QAChB,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QACtD,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACzD,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC;QACnD,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,mBAAmB,CAAC;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA6B;IAE7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;QACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;QACpC,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU;QACzC,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU;QAEzC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChD,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAClE,UAAU,CAAC,KAAK,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAClE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IACtD,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC9D,MAAM,CACJ,KAAK,CAAC,4BAA4B,EAClC,yCAAyC,CAC1C,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,UAAkB;IAC/B,OAAO,UAAU,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,UAAkB;IAC9B,OAAO,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { ContextIntegrityPolicyRecordV1, ContextIntegrityStateV1 } from "./context-integrity-contracts.js";
|
|
2
|
+
import type { RoleAlignmentCheckpointV1, RoleAlignmentSignalV1 } from "./role-alignment.js";
|
|
3
|
+
export interface ContextIntegrityRoleSignalBindingV1 {
|
|
4
|
+
readonly assessmentRequestId: string;
|
|
5
|
+
readonly assessorId: string;
|
|
6
|
+
readonly assessorVersion: number;
|
|
7
|
+
readonly assessorBindingDigest: string;
|
|
8
|
+
readonly tenantId: string;
|
|
9
|
+
readonly sessionId: string;
|
|
10
|
+
readonly agentId: string;
|
|
11
|
+
readonly stepId: string;
|
|
12
|
+
readonly checkpoint: RoleAlignmentCheckpointV1;
|
|
13
|
+
readonly roleAnchorDigest: string;
|
|
14
|
+
readonly roleRevision: number;
|
|
15
|
+
readonly targetDigest: string;
|
|
16
|
+
readonly observedAtLogicalMs: number;
|
|
17
|
+
readonly expiresAtLogicalMs: number;
|
|
18
|
+
}
|
|
19
|
+
/**
|
|
20
|
+
* Projects content-free integrity state into an ordinary role-alignment
|
|
21
|
+
* signal. The caller must explicitly bind this factory as its assessor.
|
|
22
|
+
*/
|
|
23
|
+
export declare function createContextIntegrityRoleAlignmentSignalV1(input: {
|
|
24
|
+
readonly state: ContextIntegrityStateV1;
|
|
25
|
+
readonly policy: ContextIntegrityPolicyRecordV1;
|
|
26
|
+
readonly binding: ContextIntegrityRoleSignalBindingV1;
|
|
27
|
+
}): RoleAlignmentSignalV1;
|
|
28
|
+
//# sourceMappingURL=context-integrity-role-alignment.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"context-integrity-role-alignment.d.ts","sourceRoot":"","sources":["../src/context-integrity-role-alignment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,8BAA8B,EAC9B,uBAAuB,EACxB,MAAM,kCAAkC,CAAC;AAM1C,OAAO,KAAK,EACV,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;GAGG;AACH,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,mCAAmC,CAAC;CACvD,GAAG,qBAAqB,CAmDxB"}
|