@cello-protocol/gateway 0.0.2 → 0.0.3

package/dist/passthrough.d.ts

@@ -2,11 +2,11 @@ import type { ScreenContext, ScreenVerdict, SecurityGatewayClient } from "./type
 /**
  * The null-object gateway client: screens nothing, always allows.
  *
- * This is the daemon's default when no gateway is configured (backward compatibility for the
- * many daemon/SNM tests written before M9, and for a deployment that has not enabled the
- * security layer). It still RETURNS a verdict (`allow`) — so SI-001 ("never act on content
- * without a verdict") holds even on the default path; "no gateway configured" means
- * "always-allow verdict", not "no verdict".
+ * This is the daemon's default when no gateway is configured — the case for a deployment that
+ * has not enabled the security layer, and for the daemon/SNM tests that construct no gateway.
+ * It still RETURNS a verdict (`allow`) — so SI-001 ("never act on content without a verdict")
+ * holds even on the default path; "no gateway configured" means "always-allow verdict", not
+ * "no verdict".
  *
  * It contains no detection logic. Real screening lives in the gateway PROGRAM (the server +
  * the local sidecar / remote client), never in the daemon.

package/dist/passthrough.js

@@ -1,11 +1,11 @@
 /**
  * The null-object gateway client: screens nothing, always allows.
  *
- * This is the daemon's default when no gateway is configured (backward compatibility for the
- * many daemon/SNM tests written before M9, and for a deployment that has not enabled the
- * security layer). It still RETURNS a verdict (`allow`) — so SI-001 ("never act on content
- * without a verdict") holds even on the default path; "no gateway configured" means
- * "always-allow verdict", not "no verdict".
+ * This is the daemon's default when no gateway is configured — the case for a deployment that
+ * has not enabled the security layer, and for the daemon/SNM tests that construct no gateway.
+ * It still RETURNS a verdict (`allow`) — so SI-001 ("never act on content without a verdict")
+ * holds even on the default path; "no gateway configured" means "always-allow verdict", not
+ * "no verdict".
  *
  * It contains no detection logic. Real screening lives in the gateway PROGRAM (the server +
  * the local sidecar / remote client), never in the daemon.

package/dist/types.d.ts

@@ -1,16 +1,15 @@
 /**
  * @cello-protocol/gateway — the security gateway contract.
  *
- * The gateway is a SEPARATE program from the daemon (M9-CORE-001 / V3 split-deployment).
- * The daemon holds ONLY this interface and its two call sites; all detection lives in the
- * gateway program. The same interface backs both the local sidecar (Phase 1) and the
- * remote mTLS gateway (Phase 2) — Phase 2 is a transport swap behind `SecurityGatewayClient`,
- * not a rewrite.
+ * The gateway is a SEPARATE program from the daemon. The daemon holds ONLY this interface and
+ * its two call sites; all detection lives in the gateway program. The same interface backs both
+ * the local sidecar and the remote mTLS gateway — the remote form is a transport swap behind
+ * `SecurityGatewayClient`, not a rewrite.
  *
- * M9-CORE-001 implements the seam with a pass-through: every message is screened (the call
- * happens at the two fixed points) but the verdict is always `allow`, except the fail-closed
- * `block` a configured-but-unreachable gateway returns. Detectors and the redact/warn
- * dispositions arrive in later stories (M9-IN-*, M9-OUT-*, M9-FEED-001).
+ * TODAY the seam is a pass-through: every message is screened (the call happens at the two fixed
+ * points) but the verdict is always `allow`, except the fail-closed `block` a
+ * configured-but-unreachable gateway returns. No detector is wired yet, and the redact/warn
+ * dispositions are declared but never produced.
  */
 /** Which direction the content is flowing relative to the daemon. */
 export type ScreenDirection = "outbound" | "inbound";
@@ -18,19 +17,19 @@ export type ScreenDirection = "outbound" | "inbound";
  * What the gateway decided to do with a message.
  *
  * - `allow`  — deliver/send as-is (or as transformed via `content`).
- * - `block`  — do not deliver/send. M9-CORE-001 uses this only for fail-closed
- *              (`gateway_unavailable`); detectors add real blocks later.
- * - `redact` — deliver/send a transformed `content` (M9-OUT-* / M9-FEED-001).
- * - `warn`   — held pending an explicit governance decision (M9-FEED-001).
+ * - `block`  — do not deliver/send. Today this is only ever fail-closed (`gateway_unavailable`);
+ *              detectors will produce real blocks.
+ * - `redact` — deliver/send a transformed `content`.
+ * - `warn`   — held pending an explicit governance decision.
  *
- * M9-CORE-001 only ever returns `allow` or `block`; `redact`/`warn` are declared here so the
- * seam code that switches on the disposition is complete from the start.
+ * The shipping gateway only ever returns `allow` or `block`; `redact`/`warn` are declared here so
+ * the seam code that switches on the disposition is exhaustive.
  */
 export type ScreenDisposition = "allow" | "block" | "redact" | "warn";
 /** The per-stage governance disposition (the §6 model: advisory, mutating, needs-decision, blocking). */
 export type GovernanceDisposition = "observe" | "redact" | "block" | "warn";
 /**
- * A governance decision the agent attaches to a re-send to resolve a warned item (M9-FEED-001 §6):
+ * A governance decision the agent attaches to a re-send to resolve a warned item (governance §6):
  *   - `redact`       — send with a typed placeholder. Always available (the agent's autonomous lever).
  *   - `allow_once`   — send the value verbatim THIS once. Honored ONLY when `autonomous_override` is
  *                      ON; OFF (default) → rejected + re-warned (the operator must whitelist).
@@ -41,8 +40,8 @@ export type GovernanceDisposition = "observe" | "redact" | "block" | "warn";
 export type GovernanceDecision = "redact" | "allow_once" | "allow_always";
 /**
  * One governance finding published by a screen stage (§6). The verdict aggregates these; the daemon
- * renders them to the agent (M9-FEED-001) — as the transformations on a redact, the reasons on a
- * block, or the flagged items (with `flagId`) on a warn.
+ * renders them to the agent — as the transformations on a redact, the reasons on a block, or the
+ * flagged items (with `flagId`) on a warn.
  */
 export interface GovernanceEvent {
     stage: string;
@@ -60,7 +59,7 @@ export interface ScreenContext {
     /** The async-flow correlation id, threaded through every event in this send/receive (INV-7). */
     correlationId?: string;
     /**
-     * The agent's per-item decisions on a governance RE-SEND (M9-FEED-001 §6), keyed by the `flagId`
+     * The agent's per-item decisions on a governance RE-SEND (governance §6), keyed by the `flagId`
      * the prior `warn` verdict returned. Stateless: the gateway re-scans the (full) content, re-derives
      * the same deterministic flagIds, and applies these decisions. A flagId that no longer matches
      * (content changed) is ignored and that item re-warns/redacts — a decision can never mis-apply to
@@ -81,7 +80,7 @@ export interface ScreenVerdict {
     content?: Uint8Array;
     reason?: string;
     guidance?: string;
-    /** The governance findings behind this verdict (M9-FEED-001 renders them to the agent). */
+    /** The governance findings behind this verdict — the daemon renders them to the agent. */
     events?: GovernanceEvent[];
     /**
      * Set on a `block` whose cause is the CONTENT itself — a detector rejected these exact bytes
@@ -110,7 +109,7 @@ export interface SecurityGatewayClient {
 /** The reason code a fail-closed verdict carries when the gateway cannot be reached. */
 export declare const GATEWAY_UNAVAILABLE = "gateway_unavailable";
 /** The reason a fail-closed verdict carries when the gateway is reachable but the screening
- *  deadline was exceeded — a timeout is a verdict, not a hang (INV-6 / FEED-001 AC-005). */
+ *  deadline was exceeded — a timeout is a verdict, not a hang (INV-6). */
 export declare const GOVERNANCE_TIMEOUT = "governance_timeout";
 /**
  * Build the fail-closed verdict (SI-001 / DB-001 / INV-6): never deliver/send ungated content, never

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,qEAAqE;AACrE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtE,yGAAyG;AACzG,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAChF;AAED,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD;4FAC4F;AAC5F,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,GAAE,MAA4B,GAAG,aAAa,CAcjH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,qEAAqE;AACrE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtE,yGAAyG;AACzG,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC1D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAChF;AAED,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD;0EAC0E;AAC1E,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,GAAE,MAA4B,GAAG,aAAa,CAcjH"}

package/dist/types.js

@@ -1,21 +1,20 @@
 /**
  * @cello-protocol/gateway — the security gateway contract.
  *
- * The gateway is a SEPARATE program from the daemon (M9-CORE-001 / V3 split-deployment).
- * The daemon holds ONLY this interface and its two call sites; all detection lives in the
- * gateway program. The same interface backs both the local sidecar (Phase 1) and the
- * remote mTLS gateway (Phase 2) — Phase 2 is a transport swap behind `SecurityGatewayClient`,
- * not a rewrite.
+ * The gateway is a SEPARATE program from the daemon. The daemon holds ONLY this interface and
+ * its two call sites; all detection lives in the gateway program. The same interface backs both
+ * the local sidecar and the remote mTLS gateway — the remote form is a transport swap behind
+ * `SecurityGatewayClient`, not a rewrite.
  *
- * M9-CORE-001 implements the seam with a pass-through: every message is screened (the call
- * happens at the two fixed points) but the verdict is always `allow`, except the fail-closed
- * `block` a configured-but-unreachable gateway returns. Detectors and the redact/warn
- * dispositions arrive in later stories (M9-IN-*, M9-OUT-*, M9-FEED-001).
+ * TODAY the seam is a pass-through: every message is screened (the call happens at the two fixed
+ * points) but the verdict is always `allow`, except the fail-closed `block` a
+ * configured-but-unreachable gateway returns. No detector is wired yet, and the redact/warn
+ * dispositions are declared but never produced.
  */
 /** The reason code a fail-closed verdict carries when the gateway cannot be reached. */
 export const GATEWAY_UNAVAILABLE = "gateway_unavailable";
 /** The reason a fail-closed verdict carries when the gateway is reachable but the screening
- *  deadline was exceeded — a timeout is a verdict, not a hang (INV-6 / FEED-001 AC-005). */
+ *  deadline was exceeded — a timeout is a verdict, not a hang (INV-6). */
 export const GOVERNANCE_TIMEOUT = "governance_timeout";
 /**
  * Build the fail-closed verdict (SI-001 / DB-001 / INV-6): never deliver/send ungated content, never

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAyGH,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD;4FAC4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA0B,EAAE,SAAiB,mBAAmB;IAChG,MAAM,KAAK,GAAG,MAAM,KAAK,kBAAkB;QACzC,CAAC,CAAC,6EAA6E;QAC/E,CAAC,CAAC,2CAA2C,CAAC;IAChD,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,MAAM;QACN,QAAQ,EACN,SAAS,KAAK,UAAU;YACtB,CAAC,CAAC,gBAAgB,KAAK,4DAA4D;gBACjF,wDAAwD;YAC1D,CAAC,CAAC,gBAAgB,KAAK,mEAAmE;gBACxF,sGAAsG;KAC7G,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAyGH,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD;0EAC0E;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA0B,EAAE,SAAiB,mBAAmB;IAChG,MAAM,KAAK,GAAG,MAAM,KAAK,kBAAkB;QACzC,CAAC,CAAC,6EAA6E;QAC/E,CAAC,CAAC,2CAA2C,CAAC;IAChD,OAAO;QACL,WAAW,EAAE,OAAO;QACpB,MAAM;QACN,QAAQ,EACN,SAAS,KAAK,UAAU;YACtB,CAAC,CAAC,gBAAgB,KAAK,4DAA4D;gBACjF,wDAAwD;YAC1D,CAAC,CAAC,gBAAgB,KAAK,mEAAmE;gBACxF,sGAAsG;KAC7G,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/gateway",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "private": false,
   "type": "module",
   "engines": {