@agentplat/trust 0.3.0-beta.3 → 0.3.0-beta.4

package/dist/evidence-fusion-strategy.d.ts

@@ -0,0 +1,28 @@
+import type { EvidenceFusionDecisionV1, EvidenceFusionEvaluationRequestV1, EvidenceTrustStateV1 } from "./types.js";
+/** Stable descriptor for a pluggable evidence-fusion algorithm. */
+export interface EvidenceFusionStrategyDescriptorV1 {
+    readonly schemaVersion: 1;
+    readonly strategyId: string;
+    readonly strategyVersion: number;
+    readonly capabilities: readonly string[];
+    readonly descriptorDigest: string;
+}
+export interface EvidenceFusionStrategyV1 extends EvidenceFusionStrategyDescriptorV1 {
+    evaluate(input: {
+        readonly state: EvidenceTrustStateV1;
+        readonly request: EvidenceFusionEvaluationRequestV1;
+        readonly logicalTimeMs: number;
+    }): EvidenceFusionDecisionV1;
+}
+export declare function digestEvidenceFusionStrategyDescriptorV1(descriptor: Pick<EvidenceFusionStrategyDescriptorV1, "schemaVersion" | "strategyId" | "strategyVersion" | "capabilities">): string;
+export declare function validateEvidenceFusionStrategyDescriptorV1(descriptor: EvidenceFusionStrategyDescriptorV1): EvidenceFusionStrategyDescriptorV1;
+/** Registry with deterministic replacement semantics for strategy versions. */
+export declare class EvidenceFusionStrategyRegistryV1 {
+    #private;
+    register(strategy: EvidenceFusionStrategyV1): this;
+    get(strategyId: string, strategyVersion: number): EvidenceFusionStrategyV1;
+    list(): readonly EvidenceFusionStrategyDescriptorV1[];
+}
+export declare const referenceEvidenceFusionStrategyV1: EvidenceFusionStrategyV1;
+export declare const defaultEvidenceFusionStrategyV1: EvidenceFusionStrategyV1;
+//# sourceMappingURL=evidence-fusion-strategy.d.ts.map

package/dist/evidence-fusion-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-fusion-strategy.d.ts","sourceRoot":"","sources":["../src/evidence-fusion-strategy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,wBAAwB,EACxB,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB,mEAAmE;AACnE,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBACf,SAAQ,kCAAkC;IAC1C,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,wBAAwB,CAAC;CAC9B;AAcD,wBAAgB,wCAAwC,CACtD,UAAU,EAAE,IAAI,CACd,kCAAkC,EAClC,eAAe,GAAG,YAAY,GAAG,iBAAiB,GAAG,cAAc,CACpE,GACA,MAAM,CAKR;AAED,wBAAgB,0CAA0C,CACxD,UAAU,EAAE,kCAAkC,GAC7C,kCAAkC,CAapC;AAED,+EAA+E;AAC/E,qBAAa,gCAAgC;;IAG3C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,GAAG,IAAI;IASlD,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,wBAAwB;IAM1E,IAAI,IAAI,SAAS,kCAAkC,EAAE;CAOtD;AAeD,eAAO,MAAM,iCAAiC,EAAE,wBAI9C,CAAC;AAEH,eAAO,MAAM,+BAA+B,0BAAoC,CAAC"}

package/dist/evidence-fusion-strategy.js

@@ -0,0 +1,61 @@
+import { digestTrustJsonV1, TrustValidationError } from "./canonical.js";
+import { evaluateEvidenceFusionV1 } from "./fusion.js";
+const descriptorPayload = (strategy) => ({
+    schemaVersion: strategy.schemaVersion,
+    strategyId: strategy.strategyId,
+    strategyVersion: strategy.strategyVersion,
+    capabilities: [...strategy.capabilities],
+});
+export function digestEvidenceFusionStrategyDescriptorV1(descriptor) {
+    return digestTrustJsonV1("trace", descriptorPayload(descriptor));
+}
+export function validateEvidenceFusionStrategyDescriptorV1(descriptor) {
+    if (descriptor.schemaVersion !== 1 ||
+        !descriptor.strategyId ||
+        !Number.isSafeInteger(descriptor.strategyVersion) ||
+        descriptor.strategyVersion < 1 ||
+        !Array.isArray(descriptor.capabilities) ||
+        descriptor.capabilities.some((item) => typeof item !== "string") ||
+        [...descriptor.capabilities].sort().some((item, index, all) => index > 0 && item === all[index - 1]) ||
+        descriptor.descriptorDigest !== digestEvidenceFusionStrategyDescriptorV1(descriptor))
+        throw new TrustValidationError("evidence fusion strategy descriptor is invalid");
+    return Object.freeze({ ...descriptor, capabilities: Object.freeze([...descriptor.capabilities]) });
+}
+/** Registry with deterministic replacement semantics for strategy versions. */
+export class EvidenceFusionStrategyRegistryV1 {
+    #strategies = new Map();
+    register(strategy) {
+        const validated = validateEvidenceFusionStrategyDescriptorV1(strategy);
+        const key = `${validated.strategyId}\0${validated.strategyVersion}`;
+        if (this.#strategies.has(key))
+            throw new TrustValidationError("evidence fusion strategy version already registered");
+        this.#strategies.set(key, strategy);
+        return this;
+    }
+    get(strategyId, strategyVersion) {
+        const strategy = this.#strategies.get(`${strategyId}\0${strategyVersion}`);
+        if (!strategy)
+            throw new TrustValidationError("evidence fusion strategy is unavailable");
+        return strategy;
+    }
+    list() {
+        return Object.freeze([...this.#strategies.values()]
+            .sort((a, b) => `${a.strategyId}\0${a.strategyVersion}`.localeCompare(`${b.strategyId}\0${b.strategyVersion}`))
+            .map(({ evaluate: _evaluate, ...descriptor }) => Object.freeze(descriptor)));
+    }
+}
+/** Reference implementation preserving the existing deterministic fusion algorithm. */
+const referenceEvaluateV1 = ({ state, request, logicalTimeMs }) => evaluateEvidenceFusionV1(state, request, logicalTimeMs);
+const referenceDescriptorV1 = {
+    schemaVersion: 1,
+    strategyId: "weighted-threshold",
+    strategyVersion: 1,
+    capabilities: Object.freeze(["deterministic", "weighted-threshold", "dependency-aware"]),
+};
+export const referenceEvidenceFusionStrategyV1 = Object.freeze({
+    ...referenceDescriptorV1,
+    descriptorDigest: digestEvidenceFusionStrategyDescriptorV1(referenceDescriptorV1),
+    evaluate: referenceEvaluateV1,
+});
+export const defaultEvidenceFusionStrategyV1 = referenceEvidenceFusionStrategyV1;
+//# sourceMappingURL=evidence-fusion-strategy.js.map

package/dist/evidence-fusion-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-fusion-strategy.js","sourceRoot":"","sources":["../src/evidence-fusion-strategy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAyBvD,MAAM,iBAAiB,GAAG,CACxB,QAGC,EACD,EAAE,CAAC,CAAC;IACJ,aAAa,EAAE,QAAQ,CAAC,aAAa;IACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,UAAU,wCAAwC,CACtD,UAGC;IAED,OAAO,iBAAiB,CACtB,OAAO,EACP,iBAAiB,CAAC,UAAU,CAAyB,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,UAA8C;IAE9C,IACE,UAAU,CAAC,aAAa,KAAK,CAAC;QAC9B,CAAC,UAAU,CAAC,UAAU;QACtB,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC;QACjD,UAAU,CAAC,eAAe,GAAG,CAAC;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QACvC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAChE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACpG,UAAU,CAAC,gBAAgB,KAAK,wCAAwC,CAAC,UAAU,CAAC;QAEpF,MAAM,IAAI,oBAAoB,CAAC,gDAAgD,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,+EAA+E;AAC/E,MAAM,OAAO,gCAAgC;IAClC,WAAW,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEnE,QAAQ,CAAC,QAAkC;QACzC,MAAM,SAAS,GAAG,0CAA0C,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC,eAAe,EAAE,CAAC;QACpE,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAC3B,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CAAC,UAAkB,EAAE,eAAuB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,UAAU,KAAK,eAAe,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,CAAC,CAAC;QACzF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aAC3B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;aAC9G,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC9E,CAAC;IACJ,CAAC;CACF;AAED,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAI3D,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAE9D,MAAM,qBAAqB,GAAG;IAC5B,aAAa,EAAE,CAAC;IAChB,UAAU,EAAE,oBAAoB;IAChC,eAAe,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;CAChF,CAAC;AACX,MAAM,CAAC,MAAM,iCAAiC,GAA6B,MAAM,CAAC,MAAM,CAAC;IACvF,GAAG,qBAAqB;IACxB,gBAAgB,EAAE,wCAAwC,CAAC,qBAAqB,CAAC;IACjF,QAAQ,EAAE,mBAAmB;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,iCAAiC,CAAC"}

package/dist/index.d.ts

@@ -11,4 +11,6 @@ export * from "./quarantine.js";
 export * from "./state.js";
 export * from "./lifecycle.js";
 export * from "./peer-credibility.js";
+export * from "./propagation.js";
+export * from "./evidence-fusion-strategy.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC"}

package/dist/index.js

@@ -11,4 +11,6 @@ export * from "./quarantine.js";
 export * from "./state.js";
 export * from "./lifecycle.js";
 export * from "./peer-credibility.js";
+export * from "./propagation.js";
+export * from "./evidence-fusion-strategy.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC"}

package/dist/propagation.d.ts

@@ -0,0 +1,51 @@
+/** A bounded, content-bound hop in a propagated message's custody chain. */
+export interface PropagationHopV1 {
+    readonly hopIndex: number;
+    readonly senderId: string;
+    readonly receiverId: string;
+    readonly previousHopDigest: string | null;
+    readonly hopDigest: string;
+}
+export type PropagationDispositionV1 = "active" | "quarantined" | "blocked";
+/**
+ * Transport-neutral envelope for content that may cross agent boundaries.
+ * The envelope is deliberately independent of a transport or model provider.
+ */
+export interface PropagatedContentV1 {
+    readonly schemaVersion: 1;
+    readonly contentDigest: string;
+    readonly originId: string;
+    readonly originProofDigest: string;
+    readonly hops: readonly PropagationHopV1[];
+    readonly propagationBudget: number;
+    readonly forwardsUsed: number;
+    readonly disposition: PropagationDispositionV1;
+    readonly quarantineReason: string | null;
+}
+export interface PropagationPolicyV1 {
+    readonly maximumHops: number;
+    readonly maximumForwards: number;
+    readonly quarantineOnBudgetExhaustion: boolean;
+    readonly quarantineOnOriginMismatch: boolean;
+    readonly blockQuarantinedForwarding: boolean;
+}
+export interface PropagationAssessmentV1 {
+    readonly allowed: boolean;
+    readonly disposition: PropagationDispositionV1;
+    readonly reasonCodes: readonly ("origin_invalid" | "hop_invalid" | "budget_exhausted" | "quarantine_active" | "forwarding_blocked")[];
+    readonly envelope: PropagatedContentV1;
+}
+export declare function propagationHopDigestV1(hop: Omit<PropagationHopV1, "hopDigest"> & {
+    readonly contentDigest: string;
+}): string;
+export declare function createPropagatedContentV1(input: {
+    readonly contentDigest: string;
+    readonly originId: string;
+    readonly originProofDigest?: string;
+    readonly propagationBudget: number;
+}): PropagatedContentV1;
+export declare function appendPropagationHopV1(envelope: PropagatedContentV1, senderId: string, receiverId: string, policy: PropagationPolicyV1): PropagationAssessmentV1;
+export declare function assessPropagationV1(envelope: PropagatedContentV1, policy: PropagationPolicyV1): PropagationAssessmentV1;
+export declare const canForwardPropagatedContentV1: (envelope: PropagatedContentV1, policy: PropagationPolicyV1) => boolean;
+export declare function validatePropagationEnvelopeV1(value: unknown): asserts value is PropagatedContentV1;
+//# sourceMappingURL=propagation.d.ts.map

package/dist/propagation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagation.d.ts","sourceRoot":"","sources":["../src/propagation.ts"],"names":[],"mappings":"AAIA,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC;AAE5E;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;IAC/C,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,gBAAgB,GAAG,aAAa,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EAAE,CAAC;IACtI,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC;AAcD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,GAAG;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAG5H;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC,GAAG,mBAAmB,CAQtB;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,CAgBhK;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,CAKvH;AAED,eAAO,MAAM,6BAA6B,GAAI,UAAU,mBAAmB,EAAE,QAAQ,mBAAmB,KAAG,OAAwD,CAAC;AAMpK,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAgBlG"}

package/dist/propagation.js

@@ -0,0 +1,88 @@
+import { deepFreeze, digestTrustJsonV1, TrustValidationError } from "./canonical.js";
+import { assertExactKeys, assertIdentifier, assertSafeInteger, assertTrustDigest } from "./validation.js";
+const dispositionValues = ["active", "quarantined", "blocked"];
+const digest = (value) => digestTrustJsonV1("origin-proof", value);
+const hopPayload = (hopIndex, senderId, receiverId, previousHopDigest, contentDigest) => ({
+    schemaVersion: 1, hopIndex, senderId, receiverId, previousHopDigest, contentDigest,
+});
+function validatePolicy(policy) {
+    assertSafeInteger(policy.maximumHops, "maximumHops");
+    assertSafeInteger(policy.maximumForwards, "maximumForwards");
+    if (policy.maximumHops < 0 || policy.maximumForwards < 0)
+        throw new TrustValidationError("propagation limits must be non-negative");
+}
+export function propagationHopDigestV1(hop) {
+    assertTrustDigest(hop.contentDigest, "contentDigest");
+    return digest(hopPayload(hop.hopIndex, hop.senderId, hop.receiverId, hop.previousHopDigest, hop.contentDigest));
+}
+export function createPropagatedContentV1(input) {
+    assertTrustDigest(input.contentDigest, "contentDigest");
+    assertIdentifier(input.originId, "originId");
+    assertSafeInteger(input.propagationBudget, "propagationBudget");
+    if (input.propagationBudget < 0)
+        throw new TrustValidationError("propagationBudget must be non-negative");
+    const originProofDigest = input.originProofDigest ?? digest({ schemaVersion: 1, contentDigest: input.contentDigest, originId: input.originId });
+    assertTrustDigest(originProofDigest, "originProofDigest");
+    return deepFreeze({ schemaVersion: 1, contentDigest: input.contentDigest, originId: input.originId, originProofDigest, hops: [], propagationBudget: input.propagationBudget, forwardsUsed: 0, disposition: "active", quarantineReason: null });
+}
+export function appendPropagationHopV1(envelope, senderId, receiverId, policy) {
+    validatePropagationEnvelopeV1(envelope);
+    validatePolicy(policy);
+    assertIdentifier(senderId, "senderId");
+    assertIdentifier(receiverId, "receiverId");
+    if (envelope.disposition !== "active" && policy.blockQuarantinedForwarding)
+        return assess(envelope, "forwarding_blocked", "blocked");
+    const nextIndex = envelope.hops.length;
+    const previous = envelope.hops.at(-1)?.hopDigest ?? null;
+    if (nextIndex >= policy.maximumHops || envelope.forwardsUsed >= policy.maximumForwards || envelope.propagationBudget <= 0) {
+        const disposition = policy.quarantineOnBudgetExhaustion ? "quarantined" : "blocked";
+        return assess({ ...envelope, disposition, quarantineReason: "budget_exhausted" }, "budget_exhausted", disposition);
+    }
+    const hopBase = { hopIndex: nextIndex, senderId, receiverId, previousHopDigest: previous };
+    const hop = {
+        ...hopBase,
+        hopDigest: propagationHopDigestV1({ ...hopBase, contentDigest: envelope.contentDigest }),
+    };
+    const next = { ...envelope, hops: [...envelope.hops, hop], forwardsUsed: envelope.forwardsUsed + 1, propagationBudget: envelope.propagationBudget - 1 };
+    return { allowed: true, disposition: "active", reasonCodes: [], envelope: deepFreeze(next) };
+}
+export function assessPropagationV1(envelope, policy) {
+    validatePropagationEnvelopeV1(envelope);
+    validatePolicy(policy);
+    if (envelope.disposition !== "active")
+        return assess(envelope, envelope.disposition === "blocked" ? "forwarding_blocked" : "quarantine_active", envelope.disposition);
+    if (envelope.hops.length > policy.maximumHops || envelope.forwardsUsed > policy.maximumForwards || envelope.propagationBudget < 0)
+        return assess(envelope, "budget_exhausted", policy.quarantineOnBudgetExhaustion ? "quarantined" : "blocked");
+    return { allowed: true, disposition: "active", reasonCodes: [], envelope };
+}
+export const canForwardPropagatedContentV1 = (envelope, policy) => assessPropagationV1(envelope, policy).allowed;
+function assess(envelope, reason, disposition) {
+    return { allowed: false, disposition, reasonCodes: [reason], envelope: deepFreeze(envelope) };
+}
+export function validatePropagationEnvelopeV1(value) {
+    assertExactKeys(value, ["schemaVersion", "contentDigest", "originId", "originProofDigest", "hops", "propagationBudget", "forwardsUsed", "disposition", "quarantineReason"], "propagation envelope");
+    const envelope = value;
+    if (envelope.schemaVersion !== 1 || !dispositionValues.includes(envelope.disposition))
+        throw new TrustValidationError("propagation envelope is invalid");
+    assertTrustDigest(envelope.contentDigest, "contentDigest");
+    assertTrustDigest(envelope.originProofDigest, "originProofDigest");
+    assertIdentifier(envelope.originId, "originId");
+    assertSafeInteger(envelope.propagationBudget, "propagationBudget");
+    assertSafeInteger(envelope.forwardsUsed, "forwardsUsed");
+    if (envelope.propagationBudget < 0 || envelope.forwardsUsed < 0 || !Array.isArray(envelope.hops))
+        throw new TrustValidationError("propagation counters are invalid");
+    let previous = null;
+    envelope.hops.forEach((candidate, index) => {
+        const hop = candidate;
+        assertExactKeys(hop, ["hopIndex", "senderId", "receiverId", "previousHopDigest", "hopDigest"], "propagation hop");
+        if (hop.hopIndex !== index || hop.previousHopDigest !== previous)
+            throw new TrustValidationError("propagation hop chain is invalid");
+        assertIdentifier(hop.senderId, "hop senderId");
+        assertIdentifier(hop.receiverId, "hop receiverId");
+        assertTrustDigest(hop.hopDigest, "hopDigest");
+        if (propagationHopDigestV1({ hopIndex: hop.hopIndex, senderId: hop.senderId, receiverId: hop.receiverId, previousHopDigest: hop.previousHopDigest, contentDigest: envelope.contentDigest }) !== hop.hopDigest)
+            throw new TrustValidationError("propagation hop digest is invalid");
+        previous = hop.hopDigest;
+    });
+}
+//# sourceMappingURL=propagation.js.map

package/dist/propagation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagation.js","sourceRoot":"","sources":["../src/propagation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA4C1G,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAU,CAAC;AACxE,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAU,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AACtF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAkB,EAAE,iBAAgC,EAAE,aAAqB,EAAa,EAAE,CAAC,CAAC;IAClJ,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa;CACnF,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,MAA2B;IACjD,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,CAAC,CAAC;AACtI,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6E;IAClH,iBAAiB,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAKzC;IACC,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACxD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAC;IAC1G,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChJ,iBAAiB,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;AACjP,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA6B,EAAE,QAAgB,EAAE,UAAkB,EAAE,MAA2B;IACrI,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAAC,gBAAgB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACpJ,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,0BAA0B;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACrI,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;IACzD,IAAI,SAAS,IAAI,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,iBAAiB,IAAI,CAAC,EAAE,CAAC;QAC1H,MAAM,WAAW,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,OAAO,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IAC3F,MAAM,GAAG,GAAqB;QAC5B,GAAG,OAAO;QACV,SAAS,EAAE,sBAAsB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;KACzF,CAAC;IACF,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,GAAG,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;IACxJ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA6B,EAAE,MAA2B;IAC5F,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtK,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,GAAG,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC,iBAAiB,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,QAA6B,EAAE,MAA2B,EAAW,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC;AAEpK,SAAS,MAAM,CAAC,QAA6B,EAAE,MAAsD,EAAE,WAAqC;IAC1I,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,eAAe,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACpM,MAAM,QAAQ,GAAG,KAAuC,CAAC;IACzD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;IACzJ,iBAAiB,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAAC,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChL,iBAAiB,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;IAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7H,IAAI,QAAQ,CAAC,iBAAiB,GAAG,CAAC,IAAI,QAAQ,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;IACrK,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,SAA6B,CAAC;QAC1C,eAAe,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,WAAW,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClH,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,kCAAkC,CAAC,CAAC;QACrI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClJ,IAAI,sBAAsB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;QACnR,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentplat/trust",
-  "version": "0.3.0-beta.3",
+  "version": "0.3.0-beta.4",
   "description": "Browser-safe deterministic evidence and trust primitives for AgentPlat.",
   "type": "module",
   "license": "Apache-2.0",
@@ -19,6 +19,14 @@
     "./peer-credibility": {
       "types": "./dist/peer-credibility.d.ts",
       "import": "./dist/peer-credibility.js"
+    },
+    "./propagation": {
+      "types": "./dist/propagation.d.ts",
+      "import": "./dist/propagation.js"
+    },
+    "./evidence-fusion-strategy": {
+      "types": "./dist/evidence-fusion-strategy.d.ts",
+      "import": "./dist/evidence-fusion-strategy.js"
     }
   },
   "files": [
@@ -26,7 +34,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@agentplat/core": "^0.3.0-beta.3"
+    "@agentplat/core": "^0.3.0-beta.4"
   },
   "engines": {
     "node": ">=20.19.3"