@capabilityhostprotocol/types 0.1.0

package/dist/legacy.js

@@ -0,0 +1,392 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/legacy.ts
+var legacy_exports = {};
+__export(legacy_exports, {
+  ASSURANCE_TIERS: () => ASSURANCE_TIERS,
+  ASSURANCE_TIER_DISPLAY_NAMES: () => ASSURANCE_TIER_DISPLAY_NAMES,
+  ASSURANCE_TIER_ORDER: () => ASSURANCE_TIER_ORDER,
+  DEVELOPMENT_CONFIG: () => DEVELOPMENT_CONFIG,
+  EVIDENCE_TYPES: () => EVIDENCE_TYPES,
+  EXECUTION_OUTCOMES: () => EXECUTION_OUTCOMES,
+  GOVERNANCE_MODES: () => GOVERNANCE_MODES,
+  INVARIANT_CLASSES: () => INVARIANT_CLASSES,
+  INVOCATION_MODES: () => INVOCATION_MODES,
+  LEGACY_CHP_VERSION: () => LEGACY_CHP_VERSION,
+  PRODUCTION_CONFIG: () => PRODUCTION_CONFIG,
+  RISK_CLASSES: () => RISK_CLASSES,
+  RISK_CLASS_ORDER: () => RISK_CLASS_ORDER,
+  TESTING_CONFIG: () => TESTING_CONFIG,
+  blocksExecution: () => blocksExecution,
+  compareAssuranceTier: () => compareAssuranceTier,
+  compareRiskClass: () => compareRiskClass,
+  createCapabilityDeclaration: () => createCapabilityDeclaration,
+  createChildContext: () => createChildContext,
+  createDeclaredInvariant: () => createDeclaredInvariant,
+  createEvidence: () => createEvidence,
+  createGovernanceConfig: () => createGovernanceConfig,
+  createGovernedContext: () => createGovernedContext,
+  createHostIdentity: () => createHostIdentity,
+  createInvocationContext: () => createInvocationContext,
+  createSubjectContext: () => createSubjectContext,
+  elapsedMs: () => elapsedMs,
+  emitEvidence: () => emitEvidence,
+  emitsEvidence: () => emitsEvidence,
+  getAssuranceTierDisplayName: () => getAssuranceTierDisplayName,
+  getCapabilityId: () => getCapabilityId,
+  hasEntitlement: () => hasEntitlement,
+  isCapabilityDeclaration: () => isCapabilityDeclaration,
+  isDeclaredInvariant: () => isDeclaredInvariant,
+  isEvidence: () => isEvidence,
+  isRiskAtLeast: () => isRiskAtLeast,
+  meetsAssuranceTier: () => meetsAssuranceTier
+});
+module.exports = __toCommonJS(legacy_exports);
+
+// src/risk.ts
+var RISK_CLASSES = [
+  "informational",
+  "low",
+  "medium",
+  "high",
+  "critical"
+];
+var RISK_CLASS_ORDER = {
+  informational: 0,
+  low: 1,
+  medium: 2,
+  high: 3,
+  critical: 4
+};
+function compareRiskClass(a, b) {
+  return RISK_CLASS_ORDER[a] - RISK_CLASS_ORDER[b];
+}
+function isRiskAtLeast(actual, required) {
+  return RISK_CLASS_ORDER[actual] >= RISK_CLASS_ORDER[required];
+}
+
+// src/assurance.ts
+var ASSURANCE_TIERS = ["S1", "S2", "S3"];
+var ASSURANCE_TIER_DISPLAY_NAMES = {
+  S1: "Observational",
+  S2: "Structural",
+  S3: "Attested"
+};
+var ASSURANCE_TIER_ORDER = {
+  S1: 1,
+  S2: 2,
+  S3: 3
+};
+function compareAssuranceTier(a, b) {
+  return ASSURANCE_TIER_ORDER[a] - ASSURANCE_TIER_ORDER[b];
+}
+function meetsAssuranceTier(actual, required) {
+  return ASSURANCE_TIER_ORDER[actual] >= ASSURANCE_TIER_ORDER[required];
+}
+function getAssuranceTierDisplayName(tier) {
+  return ASSURANCE_TIER_DISPLAY_NAMES[tier];
+}
+
+// src/evidence.ts
+var EVIDENCE_TYPES = [
+  // Core Execution
+  "execution_started",
+  "execution_completed",
+  "execution_failed",
+  "execution_denied",
+  "execution_aborted",
+  // Invocation Boundary
+  "invocation_received",
+  "invocation_validated",
+  "invocation_rejected",
+  // Authorization
+  "entitlement_checked",
+  "entitlement_granted",
+  "entitlement_denied",
+  // Invariants
+  "invariant_checked",
+  "invariant_passed",
+  "invariant_failed",
+  // Resilience Primitives
+  "retry_attempted",
+  "retry_exhausted",
+  "timeout_exceeded",
+  "circuit_opened",
+  "circuit_closed",
+  "rate_limited",
+  // Assurance
+  "assurance_derived",
+  "assurance_degraded",
+  // Lineage
+  "lineage_traced",
+  "causal_link_created"
+];
+function createEvidence(params) {
+  return {
+    evidence_id: crypto.randomUUID(),
+    evidence_type: params.evidence_type,
+    capability_id: params.capability_id,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    subject_id: params.subject_id ?? null,
+    correlation_id: params.correlation_id ?? null,
+    assurance_tier: params.assurance_tier ?? "S1",
+    payload: params.payload ?? {},
+    trace_id: params.trace_id ?? null
+  };
+}
+function isEvidence(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const e = obj;
+  return typeof e.evidence_id === "string" && typeof e.evidence_type === "string" && typeof e.capability_id === "string" && typeof e.timestamp === "string" && typeof e.assurance_tier === "string" && typeof e.payload === "object";
+}
+
+// src/invariants.ts
+var INVARIANT_CLASSES = [
+  "structural",
+  "environmental",
+  "data",
+  "temporal",
+  "causal"
+];
+function createDeclaredInvariant(params) {
+  return {
+    invariant_id: params.invariant_id,
+    invariant_class: params.invariant_class,
+    enforcement: params.enforcement ?? "runtime",
+    failure_behavior: params.failure_behavior ?? "deny",
+    description: params.description ?? "",
+    parameters: params.parameters ?? {}
+  };
+}
+function isDeclaredInvariant(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const i = obj;
+  return typeof i.invariant_id === "string" && typeof i.invariant_class === "string" && typeof i.enforcement === "string" && typeof i.failure_behavior === "string";
+}
+
+// src/context.ts
+function createSubjectContext(params) {
+  return {
+    subject_id: params.subject_id,
+    subject_type: params.subject_type ?? "user",
+    entitlements: params.entitlements ?? [],
+    metadata: params.metadata ?? {}
+  };
+}
+function hasEntitlement(subject, entitlement) {
+  return subject.entitlements.includes(entitlement);
+}
+function createInvocationContext(params) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id: params.capability_id,
+    subject: params.subject,
+    correlation_id: params.correlation_id ?? crypto.randomUUID(),
+    trace_id: params.trace_id ?? null,
+    parent_invocation_id: params.parent_invocation_id ?? null,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    metadata: params.metadata ?? {}
+  };
+}
+var EXECUTION_OUTCOMES = [
+  "success",
+  "failure",
+  "denied",
+  "timeout",
+  "aborted"
+];
+
+// src/governance.ts
+var GOVERNANCE_MODES = [
+  "enforce",
+  "audit",
+  "disabled",
+  "shadow"
+];
+function blocksExecution(mode) {
+  return mode === "enforce";
+}
+function emitsEvidence(mode) {
+  return mode !== "disabled";
+}
+function createGovernedContext(params) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id: params.capability_id,
+    subject: params.subject,
+    correlation_id: params.correlation_id ?? crypto.randomUUID(),
+    trace_id: params.trace_id ?? null,
+    governance_mode: params.governance_mode ?? "enforce",
+    risk_class: params.risk_class ?? "medium",
+    minimum_tier: params.minimum_tier ?? "S1",
+    invariants: params.invariants ?? [],
+    evidence: [],
+    metadata: params.metadata ?? {},
+    started_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function emitEvidence(ctx, evidence_type, payload, assurance_tier) {
+  const evidence = createEvidence({
+    evidence_type,
+    capability_id: ctx.capability_id,
+    subject_id: ctx.subject.subject_id,
+    correlation_id: ctx.correlation_id,
+    assurance_tier: assurance_tier ?? ctx.minimum_tier,
+    payload: payload ?? {},
+    trace_id: ctx.trace_id
+  });
+  ctx.evidence.push(evidence);
+  return evidence;
+}
+function createChildContext(parent, capability_id) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id,
+    subject: parent.subject,
+    correlation_id: parent.correlation_id,
+    trace_id: parent.trace_id,
+    governance_mode: parent.governance_mode,
+    risk_class: parent.risk_class,
+    minimum_tier: parent.minimum_tier,
+    invariants: [],
+    evidence: [],
+    metadata: {
+      ...parent.metadata,
+      parent_invocation_id: parent.invocation_id
+    },
+    started_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function elapsedMs(ctx) {
+  const started = new Date(ctx.started_at).getTime();
+  return Date.now() - started;
+}
+function createGovernanceConfig(overrides) {
+  return {
+    default_mode: "enforce",
+    require_subject: true,
+    emit_evidence: true,
+    audit_denials: true,
+    default_tier: "S1",
+    ...overrides
+  };
+}
+var DEVELOPMENT_CONFIG = {
+  default_mode: "audit",
+  require_subject: false,
+  emit_evidence: true,
+  audit_denials: true,
+  default_tier: "S1"
+};
+var PRODUCTION_CONFIG = {
+  default_mode: "enforce",
+  require_subject: true,
+  emit_evidence: true,
+  audit_denials: true,
+  default_tier: "S2"
+};
+var TESTING_CONFIG = {
+  default_mode: "disabled",
+  require_subject: false,
+  emit_evidence: false,
+  audit_denials: false,
+  default_tier: "S1"
+};
+
+// src/capability.ts
+function getCapabilityId(decl) {
+  return `${decl.name}:${decl.version}`;
+}
+function createCapabilityDeclaration(params) {
+  return {
+    name: params.name,
+    version: params.version ?? "1.0.0",
+    risk_class: params.risk_class ?? "medium",
+    description: params.description ?? "",
+    invariants: params.invariants ?? [],
+    evidence_types: params.evidence_types ?? [],
+    require_entitlement: params.require_entitlement ?? false,
+    minimum_tier: params.minimum_tier ?? "S1",
+    owner: params.owner ?? null,
+    tags: params.tags ?? []
+  };
+}
+function isCapabilityDeclaration(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const c = obj;
+  return typeof c.name === "string" && typeof c.version === "string" && typeof c.risk_class === "string" && typeof c.require_entitlement === "boolean";
+}
+var INVOCATION_MODES = [
+  "sync",
+  "async",
+  "stream",
+  "fire_and_forget"
+];
+function createHostIdentity(params) {
+  return {
+    host_id: params.host_id,
+    host_type: params.host_type ?? "server",
+    version: params.version ?? "1.0.0",
+    environment: params.environment ?? "development",
+    metadata: params.metadata ?? {}
+  };
+}
+
+// src/legacy.ts
+var LEGACY_CHP_VERSION = "1.0";
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ASSURANCE_TIERS,
+  ASSURANCE_TIER_DISPLAY_NAMES,
+  ASSURANCE_TIER_ORDER,
+  DEVELOPMENT_CONFIG,
+  EVIDENCE_TYPES,
+  EXECUTION_OUTCOMES,
+  GOVERNANCE_MODES,
+  INVARIANT_CLASSES,
+  INVOCATION_MODES,
+  LEGACY_CHP_VERSION,
+  PRODUCTION_CONFIG,
+  RISK_CLASSES,
+  RISK_CLASS_ORDER,
+  TESTING_CONFIG,
+  blocksExecution,
+  compareAssuranceTier,
+  compareRiskClass,
+  createCapabilityDeclaration,
+  createChildContext,
+  createDeclaredInvariant,
+  createEvidence,
+  createGovernanceConfig,
+  createGovernedContext,
+  createHostIdentity,
+  createInvocationContext,
+  createSubjectContext,
+  elapsedMs,
+  emitEvidence,
+  emitsEvidence,
+  getAssuranceTierDisplayName,
+  getCapabilityId,
+  hasEntitlement,
+  isCapabilityDeclaration,
+  isDeclaredInvariant,
+  isEvidence,
+  isRiskAtLeast,
+  meetsAssuranceTier
+});

package/dist/legacy.mjs

@@ -0,0 +1,330 @@
+// src/risk.ts
+var RISK_CLASSES = [
+  "informational",
+  "low",
+  "medium",
+  "high",
+  "critical"
+];
+var RISK_CLASS_ORDER = {
+  informational: 0,
+  low: 1,
+  medium: 2,
+  high: 3,
+  critical: 4
+};
+function compareRiskClass(a, b) {
+  return RISK_CLASS_ORDER[a] - RISK_CLASS_ORDER[b];
+}
+function isRiskAtLeast(actual, required) {
+  return RISK_CLASS_ORDER[actual] >= RISK_CLASS_ORDER[required];
+}
+
+// src/assurance.ts
+var ASSURANCE_TIERS = ["S1", "S2", "S3"];
+var ASSURANCE_TIER_DISPLAY_NAMES = {
+  S1: "Observational",
+  S2: "Structural",
+  S3: "Attested"
+};
+var ASSURANCE_TIER_ORDER = {
+  S1: 1,
+  S2: 2,
+  S3: 3
+};
+function compareAssuranceTier(a, b) {
+  return ASSURANCE_TIER_ORDER[a] - ASSURANCE_TIER_ORDER[b];
+}
+function meetsAssuranceTier(actual, required) {
+  return ASSURANCE_TIER_ORDER[actual] >= ASSURANCE_TIER_ORDER[required];
+}
+function getAssuranceTierDisplayName(tier) {
+  return ASSURANCE_TIER_DISPLAY_NAMES[tier];
+}
+
+// src/evidence.ts
+var EVIDENCE_TYPES = [
+  // Core Execution
+  "execution_started",
+  "execution_completed",
+  "execution_failed",
+  "execution_denied",
+  "execution_aborted",
+  // Invocation Boundary
+  "invocation_received",
+  "invocation_validated",
+  "invocation_rejected",
+  // Authorization
+  "entitlement_checked",
+  "entitlement_granted",
+  "entitlement_denied",
+  // Invariants
+  "invariant_checked",
+  "invariant_passed",
+  "invariant_failed",
+  // Resilience Primitives
+  "retry_attempted",
+  "retry_exhausted",
+  "timeout_exceeded",
+  "circuit_opened",
+  "circuit_closed",
+  "rate_limited",
+  // Assurance
+  "assurance_derived",
+  "assurance_degraded",
+  // Lineage
+  "lineage_traced",
+  "causal_link_created"
+];
+function createEvidence(params) {
+  return {
+    evidence_id: crypto.randomUUID(),
+    evidence_type: params.evidence_type,
+    capability_id: params.capability_id,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    subject_id: params.subject_id ?? null,
+    correlation_id: params.correlation_id ?? null,
+    assurance_tier: params.assurance_tier ?? "S1",
+    payload: params.payload ?? {},
+    trace_id: params.trace_id ?? null
+  };
+}
+function isEvidence(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const e = obj;
+  return typeof e.evidence_id === "string" && typeof e.evidence_type === "string" && typeof e.capability_id === "string" && typeof e.timestamp === "string" && typeof e.assurance_tier === "string" && typeof e.payload === "object";
+}
+
+// src/invariants.ts
+var INVARIANT_CLASSES = [
+  "structural",
+  "environmental",
+  "data",
+  "temporal",
+  "causal"
+];
+function createDeclaredInvariant(params) {
+  return {
+    invariant_id: params.invariant_id,
+    invariant_class: params.invariant_class,
+    enforcement: params.enforcement ?? "runtime",
+    failure_behavior: params.failure_behavior ?? "deny",
+    description: params.description ?? "",
+    parameters: params.parameters ?? {}
+  };
+}
+function isDeclaredInvariant(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const i = obj;
+  return typeof i.invariant_id === "string" && typeof i.invariant_class === "string" && typeof i.enforcement === "string" && typeof i.failure_behavior === "string";
+}
+
+// src/context.ts
+function createSubjectContext(params) {
+  return {
+    subject_id: params.subject_id,
+    subject_type: params.subject_type ?? "user",
+    entitlements: params.entitlements ?? [],
+    metadata: params.metadata ?? {}
+  };
+}
+function hasEntitlement(subject, entitlement) {
+  return subject.entitlements.includes(entitlement);
+}
+function createInvocationContext(params) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id: params.capability_id,
+    subject: params.subject,
+    correlation_id: params.correlation_id ?? crypto.randomUUID(),
+    trace_id: params.trace_id ?? null,
+    parent_invocation_id: params.parent_invocation_id ?? null,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    metadata: params.metadata ?? {}
+  };
+}
+var EXECUTION_OUTCOMES = [
+  "success",
+  "failure",
+  "denied",
+  "timeout",
+  "aborted"
+];
+
+// src/governance.ts
+var GOVERNANCE_MODES = [
+  "enforce",
+  "audit",
+  "disabled",
+  "shadow"
+];
+function blocksExecution(mode) {
+  return mode === "enforce";
+}
+function emitsEvidence(mode) {
+  return mode !== "disabled";
+}
+function createGovernedContext(params) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id: params.capability_id,
+    subject: params.subject,
+    correlation_id: params.correlation_id ?? crypto.randomUUID(),
+    trace_id: params.trace_id ?? null,
+    governance_mode: params.governance_mode ?? "enforce",
+    risk_class: params.risk_class ?? "medium",
+    minimum_tier: params.minimum_tier ?? "S1",
+    invariants: params.invariants ?? [],
+    evidence: [],
+    metadata: params.metadata ?? {},
+    started_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function emitEvidence(ctx, evidence_type, payload, assurance_tier) {
+  const evidence = createEvidence({
+    evidence_type,
+    capability_id: ctx.capability_id,
+    subject_id: ctx.subject.subject_id,
+    correlation_id: ctx.correlation_id,
+    assurance_tier: assurance_tier ?? ctx.minimum_tier,
+    payload: payload ?? {},
+    trace_id: ctx.trace_id
+  });
+  ctx.evidence.push(evidence);
+  return evidence;
+}
+function createChildContext(parent, capability_id) {
+  return {
+    invocation_id: crypto.randomUUID(),
+    capability_id,
+    subject: parent.subject,
+    correlation_id: parent.correlation_id,
+    trace_id: parent.trace_id,
+    governance_mode: parent.governance_mode,
+    risk_class: parent.risk_class,
+    minimum_tier: parent.minimum_tier,
+    invariants: [],
+    evidence: [],
+    metadata: {
+      ...parent.metadata,
+      parent_invocation_id: parent.invocation_id
+    },
+    started_at: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function elapsedMs(ctx) {
+  const started = new Date(ctx.started_at).getTime();
+  return Date.now() - started;
+}
+function createGovernanceConfig(overrides) {
+  return {
+    default_mode: "enforce",
+    require_subject: true,
+    emit_evidence: true,
+    audit_denials: true,
+    default_tier: "S1",
+    ...overrides
+  };
+}
+var DEVELOPMENT_CONFIG = {
+  default_mode: "audit",
+  require_subject: false,
+  emit_evidence: true,
+  audit_denials: true,
+  default_tier: "S1"
+};
+var PRODUCTION_CONFIG = {
+  default_mode: "enforce",
+  require_subject: true,
+  emit_evidence: true,
+  audit_denials: true,
+  default_tier: "S2"
+};
+var TESTING_CONFIG = {
+  default_mode: "disabled",
+  require_subject: false,
+  emit_evidence: false,
+  audit_denials: false,
+  default_tier: "S1"
+};
+
+// src/capability.ts
+function getCapabilityId(decl) {
+  return `${decl.name}:${decl.version}`;
+}
+function createCapabilityDeclaration(params) {
+  return {
+    name: params.name,
+    version: params.version ?? "1.0.0",
+    risk_class: params.risk_class ?? "medium",
+    description: params.description ?? "",
+    invariants: params.invariants ?? [],
+    evidence_types: params.evidence_types ?? [],
+    require_entitlement: params.require_entitlement ?? false,
+    minimum_tier: params.minimum_tier ?? "S1",
+    owner: params.owner ?? null,
+    tags: params.tags ?? []
+  };
+}
+function isCapabilityDeclaration(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const c = obj;
+  return typeof c.name === "string" && typeof c.version === "string" && typeof c.risk_class === "string" && typeof c.require_entitlement === "boolean";
+}
+var INVOCATION_MODES = [
+  "sync",
+  "async",
+  "stream",
+  "fire_and_forget"
+];
+function createHostIdentity(params) {
+  return {
+    host_id: params.host_id,
+    host_type: params.host_type ?? "server",
+    version: params.version ?? "1.0.0",
+    environment: params.environment ?? "development",
+    metadata: params.metadata ?? {}
+  };
+}
+
+// src/legacy.ts
+var LEGACY_CHP_VERSION = "1.0";
+export {
+  ASSURANCE_TIERS,
+  ASSURANCE_TIER_DISPLAY_NAMES,
+  ASSURANCE_TIER_ORDER,
+  DEVELOPMENT_CONFIG,
+  EVIDENCE_TYPES,
+  EXECUTION_OUTCOMES,
+  GOVERNANCE_MODES,
+  INVARIANT_CLASSES,
+  INVOCATION_MODES,
+  LEGACY_CHP_VERSION,
+  PRODUCTION_CONFIG,
+  RISK_CLASSES,
+  RISK_CLASS_ORDER,
+  TESTING_CONFIG,
+  blocksExecution,
+  compareAssuranceTier,
+  compareRiskClass,
+  createCapabilityDeclaration,
+  createChildContext,
+  createDeclaredInvariant,
+  createEvidence,
+  createGovernanceConfig,
+  createGovernedContext,
+  createHostIdentity,
+  createInvocationContext,
+  createSubjectContext,
+  elapsedMs,
+  emitEvidence,
+  emitsEvidence,
+  getAssuranceTierDisplayName,
+  getCapabilityId,
+  hasEntitlement,
+  isCapabilityDeclaration,
+  isDeclaredInvariant,
+  isEvidence,
+  isRiskAtLeast,
+  meetsAssuranceTier
+};