@agentplat/trust 0.3.0-alpha.4

package/dist/profile.js

@@ -0,0 +1,253 @@
+import { deepFreeze, digestTrustJsonV1, TrustValidationError, } from "./canonical.js";
+import { digestScopeV1, digestSubjectV1 } from "./evidence.js";
+import { digestEvidenceFusionPolicyV1, validateEvidenceFusionPolicyV1, } from "./policy.js";
+import { validateEvidenceFusionDecisionV1 } from "./fusion.js";
+import { assertExactKeys, assertIdentifier, assertSafeInteger, assertTrustDigest, validateEvidenceScopeV1, validateTrustSubjectV1, } from "./validation.js";
+const compare = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+const profileKeys = [
+    "schemaVersion",
+    "profileId",
+    "profileDigest",
+    "revision",
+    "previousProfileId",
+    "previousProfileDigest",
+    "tenantId",
+    "subject",
+    "subjectDigest",
+    "scope",
+    "scopeDigest",
+    "policyId",
+    "policyVersion",
+    "policyDigest",
+    "dimensions",
+    "fusionDecisionId",
+    "fusionDecisionDigest",
+    "inputSetDigest",
+    "updatedAtLogicalMs",
+    "status",
+];
+const headKeys = [
+    "profileKey",
+    "profileId",
+    "profileDigest",
+    "revision",
+];
+function assertDimensions(value) {
+    if (!Array.isArray(value))
+        throw new TrustValidationError("profile dimensions are invalid");
+    const dimensions = value;
+    for (const dimension of dimensions) {
+        assertExactKeys(dimension, [
+            "dimensionId",
+            "scoreBasisPoints",
+            "uncertaintyBasisPoints",
+            "effectiveWeightBasisPoints",
+            "coverageBasisPoints",
+            "ageUncertaintyBasisPoints",
+            "contradictionPressureBasisPoints",
+            "includedClaimIds",
+            "excludedClaimIds",
+            "claimSourceDependencyGroupIds",
+            "latestQualifyingEffectiveAtLogicalMs",
+        ], "profile dimension");
+        assertIdentifier(dimension.dimensionId, "dimensionId");
+        for (const key of [
+            "scoreBasisPoints",
+            "uncertaintyBasisPoints",
+            "coverageBasisPoints",
+            "ageUncertaintyBasisPoints",
+            "contradictionPressureBasisPoints",
+        ]) {
+            assertSafeInteger(dimension[key], `dimension.${key}`);
+            if (dimension[key] > 10_000)
+                throw new TrustValidationError(`dimension.${key} is outside basis-point range`);
+        }
+        assertSafeInteger(dimension.effectiveWeightBasisPoints, "dimension.effectiveWeightBasisPoints");
+        if (dimension.latestQualifyingEffectiveAtLogicalMs !== null)
+            assertSafeInteger(dimension.latestQualifyingEffectiveAtLogicalMs, "latestQualifyingEffectiveAtLogicalMs");
+        for (const key of [
+            "includedClaimIds",
+            "excludedClaimIds",
+            "claimSourceDependencyGroupIds",
+        ]) {
+            if (!Array.isArray(dimension[key]) ||
+                dimension[key].some((item) => {
+                    try {
+                        assertIdentifier(item, `dimension.${key}`);
+                        return false;
+                    }
+                    catch {
+                        return true;
+                    }
+                }) ||
+                dimension[key].some((item, index) => index > 0 && compare(dimension[key][index - 1], item) >= 0))
+                throw new TrustValidationError(`dimension.${key} must be canonically ordered and unique`);
+        }
+    }
+    if (dimensions.some((item, index) => index > 0 &&
+        compare(dimensions[index - 1].dimensionId, item.dimensionId) >= 0))
+        throw new TrustValidationError("profile dimensions must be canonically ordered and unique");
+    return dimensions;
+}
+function profileBody(profile) {
+    const { profileId: _id, profileDigest: _digest, ...body } = profile;
+    return body;
+}
+export function digestTrustProfileKeyV1(value) {
+    assertExactKeys(value, ["tenantId", "scopeDigest", "subjectDigest", "policyDigest"], "profile key");
+    assertIdentifier(value.tenantId, "tenantId");
+    assertTrustDigest(value.scopeDigest, "scopeDigest");
+    assertTrustDigest(value.subjectDigest, "subjectDigest");
+    assertTrustDigest(value.policyDigest, "policyDigest");
+    return digestTrustJsonV1("profile-key", value);
+}
+export function digestTrustProfileV1(value) {
+    return digestTrustJsonV1("profile", profileBody(value));
+}
+export function deriveTrustProfileStatusV1(dimensions, policy) {
+    if (dimensions.some((dimension) => dimension.contradictionPressureBasisPoints > 0))
+        return "contested";
+    if (dimensions.every((dimension) => dimension.effectiveWeightBasisPoints === 0))
+        return "unknown";
+    const byId = new Map(policy.dimensions.map((dimension) => [dimension.dimensionId, dimension]));
+    if (dimensions.some((dimension) => {
+        const configured = byId.get(dimension.dimensionId);
+        return (!configured ||
+            dimension.scoreBasisPoints <=
+                configured.degradedScoreAtOrBelowBasisPoints ||
+            dimension.uncertaintyBasisPoints >=
+                configured.degradedUncertaintyAtOrAboveBasisPoints);
+    }))
+        return "degraded";
+    return "supported";
+}
+export function validateTrustProfileV1(value) {
+    assertExactKeys(value, profileKeys, "trust profile");
+    const profile = value;
+    if (profile.schemaVersion !== 1)
+        throw new TrustValidationError("profile schema is invalid");
+    assertIdentifier(profile.profileId, "profileId");
+    assertTrustDigest(profile.profileDigest, "profileDigest");
+    assertSafeInteger(profile.revision, "revision", 1);
+    if ((profile.previousProfileId === null) !==
+        (profile.previousProfileDigest === null))
+        throw new TrustValidationError("profile predecessor is inconsistent");
+    if (profile.previousProfileId !== null) {
+        assertIdentifier(profile.previousProfileId, "previousProfileId");
+        assertTrustDigest(profile.previousProfileDigest, "previousProfileDigest");
+        if (profile.previousProfileId !== `profile:${profile.previousProfileDigest}`)
+            throw new TrustValidationError("profile predecessor digest is invalid");
+    }
+    assertIdentifier(profile.tenantId, "tenantId");
+    const subject = validateTrustSubjectV1(profile.subject), scope = validateEvidenceScopeV1(profile.scope);
+    if (scope.tenantId !== profile.tenantId ||
+        profile.subjectDigest !== digestSubjectV1(subject) ||
+        profile.scopeDigest !== digestScopeV1(scope))
+        throw new TrustValidationError("profile subject or scope binding is invalid");
+    assertTrustDigest(profile.subjectDigest, "subjectDigest");
+    assertTrustDigest(profile.scopeDigest, "scopeDigest");
+    assertIdentifier(profile.policyId, "policyId");
+    assertSafeInteger(profile.policyVersion, "policyVersion", 1);
+    assertTrustDigest(profile.policyDigest, "policyDigest");
+    assertDimensions(profile.dimensions);
+    for (const key of ["fusionDecisionId"])
+        assertIdentifier(profile[key], key);
+    for (const key of ["fusionDecisionDigest", "inputSetDigest"])
+        assertTrustDigest(profile[key], key);
+    assertSafeInteger(profile.updatedAtLogicalMs, "updatedAtLogicalMs");
+    if (profile.dimensions.some((dimension) => dimension.latestQualifyingEffectiveAtLogicalMs !== null &&
+        dimension.latestQualifyingEffectiveAtLogicalMs >
+            profile.updatedAtLogicalMs))
+        throw new TrustValidationError("profile qualifying evidence comes from the future");
+    if (!["unknown", "supported", "contested", "degraded"].includes(profile.status))
+        throw new TrustValidationError("profile status is invalid");
+    if (profile.profileId !== `profile:${profile.profileDigest}` ||
+        profile.profileDigest !== digestTrustProfileV1(profile))
+        throw new TrustValidationError("profile digest is invalid");
+    return deepFreeze(structuredClone({ ...profile, subject, scope }));
+}
+export function createTrustProfileV1(input) {
+    assertExactKeys(input, [
+        "fusionDecision",
+        "policy",
+        "revision",
+        "previousProfileId",
+        "previousProfileDigest",
+        "updatedAtLogicalMs",
+    ], "profile creation input");
+    const decision = validateEvidenceFusionDecisionV1(input.fusionDecision);
+    const policy = validateEvidenceFusionPolicyV1(input.policy);
+    const policyDigest = digestEvidenceFusionPolicyV1(policy);
+    if (decision.policyId !== policy.policyId ||
+        decision.policyVersion !== policy.policyVersion ||
+        decision.policyDigest !== policyDigest)
+        throw new TrustValidationError("profile policy does not bind fusion decision");
+    if (input.updatedAtLogicalMs !== decision.evaluatedAtLogicalMs)
+        throw new TrustValidationError("profile clock does not match fusion decision");
+    if (decision.previousProfileDigest !== input.previousProfileDigest)
+        throw new TrustValidationError("profile predecessor does not match fusion decision");
+    assertSafeInteger(input.revision, "revision", 1);
+    assertSafeInteger(input.updatedAtLogicalMs, "updatedAtLogicalMs");
+    if ((input.revision === 1) !==
+        (input.previousProfileId === null && input.previousProfileDigest === null))
+        throw new TrustValidationError("profile revision lineage is invalid");
+    if (input.revision > 1 &&
+        (input.previousProfileId === null || input.previousProfileDigest === null))
+        throw new TrustValidationError("profile revision lineage is invalid");
+    const dimensions = assertDimensions(decision.dimensions);
+    if (dimensions.length !== policy.dimensions.length ||
+        dimensions.some((dimension, index) => dimension.dimensionId !== policy.dimensions[index]?.dimensionId))
+        throw new TrustValidationError("profile dimensions do not match policy");
+    const bare = {
+        schemaVersion: 1,
+        revision: input.revision,
+        previousProfileId: input.previousProfileId,
+        previousProfileDigest: input.previousProfileDigest,
+        tenantId: decision.tenantId,
+        subject: decision.subject,
+        subjectDigest: decision.subjectDigest,
+        scope: decision.scope,
+        scopeDigest: decision.scopeDigest,
+        policyId: decision.policyId,
+        policyVersion: decision.policyVersion,
+        policyDigest: decision.policyDigest,
+        dimensions,
+        fusionDecisionId: decision.fusionDecisionId,
+        fusionDecisionDigest: decision.fusionDecisionDigest,
+        inputSetDigest: decision.inputSetDigest,
+        updatedAtLogicalMs: input.updatedAtLogicalMs,
+        status: deriveTrustProfileStatusV1(dimensions, policy),
+    };
+    const profileDigest = digestTrustJsonV1("profile", bare);
+    return validateTrustProfileV1({
+        ...bare,
+        profileDigest,
+        profileId: `profile:${profileDigest}`,
+    });
+}
+export function trustProfileHeadV1(profile) {
+    const value = validateTrustProfileV1(profile);
+    return deepFreeze({
+        profileKey: digestTrustProfileKeyV1({
+            tenantId: value.tenantId,
+            scopeDigest: value.scopeDigest,
+            subjectDigest: value.subjectDigest,
+            policyDigest: value.policyDigest,
+        }),
+        profileId: value.profileId,
+        profileDigest: value.profileDigest,
+        revision: value.revision,
+    });
+}
+export function validateTrustProfileHeadV1(value) {
+    assertExactKeys(value, headKeys, "profile head");
+    const head = value;
+    assertTrustDigest(head.profileKey, "profileKey");
+    assertIdentifier(head.profileId, "profileId");
+    assertTrustDigest(head.profileDigest, "profileDigest");
+    assertSafeInteger(head.revision, "revision", 1);
+    if (head.profileId !== `profile:${head.profileDigest}`)
+        throw new TrustValidationError("profile head digest is invalid");
+    return deepFreeze(structuredClone(head));
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAS/D,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CACtD,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG;IAClB,eAAe;IACf,WAAW;IACX,eAAe;IACf,UAAU;IACV,mBAAmB;IACnB,uBAAuB;IACvB,UAAU;IACV,SAAS;IACT,eAAe;IACf,OAAO;IACP,aAAa;IACb,UAAU;IACV,eAAe;IACf,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB;IACpB,QAAQ;CACA,CAAC;AACX,MAAM,QAAQ,GAAG;IACf,YAAY;IACZ,WAAW;IACX,eAAe;IACf,UAAU;CACF,CAAC;AAEX,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,KAAgC,CAAC;IACpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,eAAe,CACb,SAAS,EACT;YACE,aAAa;YACb,kBAAkB;YAClB,wBAAwB;YACxB,4BAA4B;YAC5B,qBAAqB;YACrB,2BAA2B;YAC3B,kCAAkC;YAClC,kBAAkB;YAClB,kBAAkB;YAClB,+BAA+B;YAC/B,sCAAsC;SACvC,EACD,mBAAmB,CACpB,CAAC;QACF,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI;YAChB,kBAAkB;YAClB,wBAAwB;YACxB,qBAAqB;YACrB,2BAA2B;YAC3B,kCAAkC;SAC1B,EAAE,CAAC;YACX,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;YACtD,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM;gBACzB,MAAM,IAAI,oBAAoB,CAC5B,aAAa,GAAG,+BAA+B,CAChD,CAAC;QACN,CAAC;QACD,iBAAiB,CACf,SAAS,CAAC,0BAA0B,EACpC,sCAAsC,CACvC,CAAC;QACF,IAAI,SAAS,CAAC,oCAAoC,KAAK,IAAI;YACzD,iBAAiB,CACf,SAAS,CAAC,oCAAoC,EAC9C,sCAAsC,CACvC,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI;YAChB,kBAAkB;YAClB,kBAAkB;YAClB,+BAA+B;SACvB,EAAE,CAAC;YACX,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC9B,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oBAC3B,IAAI,CAAC;wBACH,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG,EAAE,CAAC,CAAC;wBAC3C,OAAO,KAAK,CAAC;oBACf,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC;gBACF,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CACjB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAC7D;gBAED,MAAM,IAAI,oBAAoB,CAC5B,aAAa,GAAG,yCAAyC,CAC1D,CAAC;QACN,CAAC;IACH,CAAC;IACD,IACE,UAAU,CAAC,IAAI,CACb,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,GAAG,CAAC;QACT,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CACpE;QAED,MAAM,IAAI,oBAAoB,CAC5B,2DAA2D,CAC5D,CAAC;IACJ,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,SAAS,WAAW,CAClB,OAAuB;IAEvB,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,eAAe,CACb,KAAK,EACL,CAAC,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,CAAC,EAC5D,aAAa,CACd,CAAC;IACF,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACxD,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtD,OAAO,iBAAiB,CAAC,aAAa,EAAE,KAAkB,CAAC,CAAC;AAC9D,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,OAAO,iBAAiB,CACtB,SAAS,EACT,WAAW,CAAC,KAAK,CAAyB,CAC3C,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,0BAA0B,CACxC,UAA4C,EAC5C,MAA8B;IAE9B,IACE,UAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gCAAgC,GAAG,CAAC,CAC9D;QAED,OAAO,WAAW,CAAC;IACrB,IACE,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,0BAA0B,KAAK,CAAC,CAAC;QAE3E,OAAO,SAAS,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CACzE,CAAC;IACF,IACE,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,CACL,CAAC,UAAU;YACX,SAAS,CAAC,gBAAgB;gBACxB,UAAU,CAAC,iCAAiC;YAC9C,SAAS,CAAC,sBAAsB;gBAC9B,UAAU,CAAC,uCAAuC,CACrD,CAAC;IACJ,CAAC,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,OAAO,WAAW,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,eAAe,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,KAAkC,CAAC;IACnD,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC;QAC7B,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC9D,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC1D,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACnD,IACE,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC;QACpC,CAAC,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC;QAExC,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACvC,gBAAgB,CAAC,OAAO,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACjE,iBAAiB,CAAC,OAAO,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QAC1E,IACE,OAAO,CAAC,iBAAiB,KAAK,WAAW,OAAO,CAAC,qBAAqB,EAAE;YAExE,MAAM,IAAI,oBAAoB,CAAC,uCAAuC,CAAC,CAAC;IAC5E,CAAC;IACD,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EACrD,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,IACE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACnC,OAAO,CAAC,aAAa,KAAK,eAAe,CAAC,OAAO,CAAC;QAClD,OAAO,CAAC,WAAW,KAAK,aAAa,CAAC,KAAK,CAAC;QAE5C,MAAM,IAAI,oBAAoB,CAC5B,6CAA6C,CAC9C,CAAC;IACJ,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC1D,iBAAiB,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACtD,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAC7D,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACxD,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAU;QAC7C,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,gBAAgB,CAAU;QACnE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,iBAAiB,CAAC,OAAO,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IACpE,IACE,OAAO,CAAC,UAAU,CAAC,IAAI,CACrB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,oCAAoC,KAAK,IAAI;QACvD,SAAS,CAAC,oCAAoC;YAC5C,OAAO,CAAC,kBAAkB,CAC/B;QAED,MAAM,IAAI,oBAAoB,CAC5B,mDAAmD,CACpD,CAAC;IACJ,IACE,CAAE,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,CAAc,CAAC,QAAQ,CACvE,OAAO,CAAC,MAAM,CACf;QAED,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC9D,IACE,OAAO,CAAC,SAAS,KAAK,WAAW,OAAO,CAAC,aAAa,EAAE;QACxD,OAAO,CAAC,aAAa,KAAK,oBAAoB,CAAC,OAAO,CAAC;QAEvD,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC9D,OAAO,UAAU,CACf,eAAe,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAmB,CAClE,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,eAAe,CACb,KAAK,EACL;QACE,gBAAgB;QAChB,QAAQ;QACR,UAAU;QACV,mBAAmB;QACnB,uBAAuB;QACvB,oBAAoB;KACrB,EACD,wBAAwB,CACzB,CAAC;IACF,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC1D,IACE,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACrC,QAAQ,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QAC/C,QAAQ,CAAC,YAAY,KAAK,YAAY;QAEtC,MAAM,IAAI,oBAAoB,CAC5B,8CAA8C,CAC/C,CAAC;IACJ,IAAI,KAAK,CAAC,kBAAkB,KAAK,QAAQ,CAAC,oBAAoB;QAC5D,MAAM,IAAI,oBAAoB,CAC5B,8CAA8C,CAC/C,CAAC;IACJ,IAAI,QAAQ,CAAC,qBAAqB,KAAK,KAAK,CAAC,qBAAqB;QAChE,MAAM,IAAI,oBAAoB,CAC5B,oDAAoD,CACrD,CAAC;IACJ,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACjD,iBAAiB,CAAC,KAAK,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;IAClE,IACE,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC;QACtB,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC;QAE1E,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,IACE,KAAK,CAAC,QAAQ,GAAG,CAAC;QAClB,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC;QAE1E,MAAM,IAAI,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzD,IACE,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM;QAC9C,UAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CACnB,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,CAClE;QAED,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAU;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU;QACV,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC;KACvD,CAAC;IACF,MAAM,aAAa,GAAG,iBAAiB,CACrC,SAAS,EACT,IAA4B,CAC7B,CAAC;IACF,OAAO,sBAAsB,CAAC;QAC5B,GAAG,IAAI;QACP,aAAa;QACb,SAAS,EAAE,WAAW,aAAa,EAAE;KACtC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,kBAAkB,CAChC,OAAuB;IAEvB,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,uBAAuB,CAAC;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC;QACF,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACH,CAAC,CAAC;AAC3B,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAsC,CAAC;IACpD,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACjD,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9C,iBAAiB,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACvD,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW,IAAI,CAAC,aAAa,EAAE;QACpD,MAAM,IAAI,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/quarantine.d.ts

@@ -0,0 +1,53 @@
+import type { EvidenceFusionDecisionV1, EvidenceFusionPolicyV1, EvidenceTrustStateV1, QuarantineHeadV1, QuarantineRecordV1, QuarantineRecoveryDecisionV1, TrustProfileV1 } from "./types.js";
+export interface QuarantineEvidenceTupleV1 {
+    readonly kind: "claim" | "attestation" | "content_resolution";
+    readonly id: string;
+    readonly digest: string;
+}
+export interface QuarantineActivationProjectionV1 {
+    readonly dimensionId: string;
+    readonly activationEvidence: readonly QuarantineEvidenceTupleV1[];
+    readonly activationDependencyGroupIds: readonly string[];
+    readonly effectiveNegativeWeightBasisPoints: number;
+    readonly reviewIntervalMs: number;
+}
+export declare function validateQuarantineEvidenceTuplesV1(value: unknown, options?: {
+    readonly nonEmpty?: boolean;
+}): readonly QuarantineEvidenceTupleV1[];
+export declare function digestTrustQuarantineKeyV1(value: {
+    readonly tenantId: string;
+    readonly subjectDigest: string;
+    readonly scopeDigest: string;
+    readonly dimensionId: string;
+    readonly policyDigest: string;
+}): string;
+export declare function digestQuarantineEvidenceSetV1(value: readonly QuarantineEvidenceTupleV1[], domain?: "quarantine-evidence-set" | "recovery-evidence-set"): string;
+export declare const digestTrustQuarantineEvidenceSetV1: (value: readonly QuarantineEvidenceTupleV1[]) => string;
+export declare const digestTrustRecoveryEvidenceSetV1: (value: readonly QuarantineEvidenceTupleV1[]) => string;
+export declare function digestQuarantineRecordV1(value: QuarantineRecordV1): string;
+export declare function validateQuarantineRecordV1(value: unknown): QuarantineRecordV1;
+export declare function createQuarantineRecordV1(input: Omit<QuarantineRecordV1, "quarantineId">): QuarantineRecordV1;
+export declare function createActiveQuarantineRecordV1(input: {
+    readonly revision: number;
+    readonly previousRecordId: string | null;
+    readonly tenantId: string;
+    readonly subjectDigest: string;
+    readonly scopeDigest: string;
+    readonly dimensionId: string;
+    readonly policyDigest: string;
+    readonly fusionDecisionId: string;
+    readonly activationEvidence: readonly QuarantineEvidenceTupleV1[];
+    readonly activationDependencyGroupIds: readonly string[];
+    readonly activatedAtLogicalMs: number;
+    readonly reviewIntervalMs: number;
+}): QuarantineRecordV1;
+export declare function deriveQuarantineActivationsV1(state: EvidenceTrustStateV1, profileValue: TrustProfileV1, decisionValue: EvidenceFusionDecisionV1, policyValue: EvidenceFusionPolicyV1, acceptedAfterLogicalMs?: number | null): readonly QuarantineActivationProjectionV1[];
+export declare function evaluateQuarantineRecoveryV1(state: EvidenceTrustStateV1, quarantineValue: QuarantineRecordV1, profileValue: TrustProfileV1, decisionValue: EvidenceFusionDecisionV1, policyValue: EvidenceFusionPolicyV1, logicalTimeMs: number): QuarantineRecoveryDecisionV1;
+export declare function createReviewRequiredQuarantineRecordV1(value: QuarantineRecordV1, reviewedAtLogicalMs: number): QuarantineRecordV1;
+export declare function digestQuarantineRecoveryDecisionV1(value: QuarantineRecoveryDecisionV1): string;
+export declare function validateQuarantineRecoveryDecisionV1(value: unknown): QuarantineRecoveryDecisionV1;
+export declare function createQuarantineRecoveryDecisionV1(input: Omit<QuarantineRecoveryDecisionV1, "recoveryDecisionId" | "recoveryDecisionDigest">): QuarantineRecoveryDecisionV1;
+export declare function createRecoveredQuarantineRecordV1(value: QuarantineRecordV1, decisionValue: QuarantineRecoveryDecisionV1): QuarantineRecordV1;
+export declare function quarantineHeadV1(value: QuarantineRecordV1): QuarantineHeadV1;
+export declare function validateQuarantineHeadV1(value: unknown): QuarantineHeadV1;
+//# sourceMappingURL=quarantine.d.ts.map

package/dist/quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../src/quarantine.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,cAAc,EAEf,MAAM,YAAY,CAAC;AASpB,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,oBAAoB,CAAC;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAClE,QAAQ,CAAC,4BAA4B,EAAE,SAAS,MAAM,EAAE,CAAC;IACzD,QAAQ,CAAC,kCAAkC,EAAE,MAAM,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AA+FD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5C,SAAS,yBAAyB,EAAE,CA6BtC;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,CAWT;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,SAAS,yBAAyB,EAAE,EAC3C,MAAM,GACF,yBAAyB,GACzB,uBAAmD,GACtD,MAAM,CAKR;AAED,eAAO,MAAM,kCAAkC,GAC7C,OAAO,SAAS,yBAAyB,EAAE,KAC1C,MAAyE,CAAC;AAC7E,eAAO,MAAM,gCAAgC,GAC3C,OAAO,SAAS,yBAAyB,EAAE,KAC1C,MAAuE,CAAC;AAS3E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAK1E;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA4F7E;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,GAC9C,kBAAkB,CASpB;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAClE,QAAQ,CAAC,4BAA4B,EAAE,SAAS,MAAM,EAAE,CAAC;IACzD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,GAAG,kBAAkB,CAsErB;AAiHD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,oBAAoB,EAC3B,YAAY,EAAE,cAAc,EAC5B,aAAa,EAAE,wBAAwB,EACvC,WAAW,EAAE,sBAAsB,EACnC,sBAAsB,GAAE,MAAM,GAAG,IAAW,GAC3C,SAAS,gCAAgC,EAAE,CAkF7C;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,oBAAoB,EAC3B,eAAe,EAAE,kBAAkB,EACnC,YAAY,EAAE,cAAc,EAC5B,aAAa,EAAE,wBAAwB,EACvC,WAAW,EAAE,sBAAsB,EACnC,aAAa,EAAE,MAAM,GACpB,4BAA4B,CA0V9B;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,kBAAkB,EACzB,mBAAmB,EAAE,MAAM,GAC1B,kBAAkB,CAepB;AAgBD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,4BAA4B,GAClC,MAAM,CAKR;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,4BAA4B,CAsE9B;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,IAAI,CACT,4BAA4B,EAC5B,oBAAoB,GAAG,wBAAwB,CAChD,GACA,4BAA4B,CAU9B;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,kBAAkB,EACzB,aAAa,EAAE,4BAA4B,GAC1C,kBAAkB,CAwBpB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAQ5E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAiBzE"}