@claude-flow/plugin-agent-federation 1.0.0-alpha.10

package/dist/domain/entities/federation-node.d.ts

@@ -0,0 +1,104 @@
+import { TrustLevel } from './trust-level.js';
+import { FederationNodeState, SuspensionReason, TransitionReason } from '../value-objects/federation-node-state.js';
+export interface FederationNodeCapabilities {
+    readonly agentTypes: readonly string[];
+    readonly maxConcurrentSessions: number;
+    readonly supportedProtocols: readonly string[];
+    readonly complianceModes: readonly string[];
+}
+export interface FederationNodeMetadata {
+    readonly organizationId?: string;
+    readonly region?: string;
+    readonly version?: string;
+    readonly [key: string]: unknown;
+}
+/** Last-transition record kept on the entity for the audit trail. */
+export interface FederationNodeStateRecord {
+    readonly state: FederationNodeState;
+    readonly changedAt: Date;
+    readonly reason?: SuspensionReason;
+    readonly correlationId?: string;
+}
+export interface FederationNodeProps {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: FederationNodeCapabilities;
+    readonly trustLevel: TrustLevel;
+    readonly trustScore: number;
+    readonly lastSeen: Date;
+    readonly metadata: FederationNodeMetadata;
+    /** Phase 2: peer state. Defaults to ACTIVE if unset. */
+    readonly state?: FederationNodeState;
+    /** Phase 2: when the current state was entered. Defaults to now. */
+    readonly stateChangedAt?: Date;
+    /** Phase 2: why we entered the current non-ACTIVE state. */
+    readonly stateReason?: SuspensionReason;
+    /** Phase 2: caller correlation key for the last transition. */
+    readonly stateCorrelationId?: string;
+}
+export declare class FederationNode {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: FederationNodeCapabilities;
+    private _trustLevel;
+    private _trustScore;
+    private _lastSeen;
+    private readonly _metadata;
+    private _state;
+    private _stateChangedAt;
+    private _stateReason?;
+    private _stateCorrelationId?;
+    constructor(props: FederationNodeProps);
+    get trustLevel(): TrustLevel;
+    get trustScore(): number;
+    get lastSeen(): Date;
+    get metadata(): FederationNodeMetadata;
+    /** Current peer state (ADR-097 Phase 2). */
+    get state(): FederationNodeState;
+    /** When the current state was entered. */
+    get stateChangedAt(): Date;
+    /** Last-transition record for the audit trail. */
+    get stateRecord(): FederationNodeStateRecord;
+    /** Convenience predicate: is this peer accepting outbound sends? */
+    get isActive(): boolean;
+    /** Convenience predicate: is this peer terminally evicted? */
+    get isEvicted(): boolean;
+    updateTrustLevel(level: TrustLevel): void;
+    updateTrustScore(score: number): void;
+    markSeen(): void;
+    isStale(maxAgeMs: number): boolean;
+    /**
+     * Transition this peer to SUSPENDED. Legal from ACTIVE only — calling
+     * from SUSPENDED or EVICTED returns false (the entity is already at or
+     * past the breaker threshold, so a duplicate trip is a no-op).
+     *
+     * Returns true if the state changed, false if the call was rejected
+     * (illegal transition). The breaker treats false as "already handled."
+     */
+    suspend(reason: TransitionReason, now?: Date): boolean;
+    /**
+     * Transition this peer to EVICTED. Legal from ACTIVE or SUSPENDED.
+     * EVICTED is terminal under normal flow — only `reactivate` (operator-
+     * initiated) can move the peer back to ACTIVE.
+     */
+    evict(reason: TransitionReason, now?: Date): boolean;
+    /**
+     * Transition back to ACTIVE. Legal from SUSPENDED (after cooldown +
+     * probe success — the breaker is responsible for those checks; this
+     * entity does not gate on time) or from EVICTED (operator override).
+     *
+     * `correlationId` lets the caller record *why* they're reactivating
+     * (probe ID, operator ticket, etc.) for the audit trail.
+     */
+    reactivate(correlationId?: string, now?: Date): boolean;
+    private _transition;
+    toProps(): FederationNodeProps;
+    static create(props: Omit<FederationNodeProps, 'trustLevel' | 'trustScore' | 'lastSeen'> & {
+        trustLevel?: TrustLevel;
+        trustScore?: number;
+        lastSeen?: Date;
+    }): FederationNode;
+}
+//# sourceMappingURL=federation-node.d.ts.map

package/dist/domain/entities/federation-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-node.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/federation-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAEjB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,wDAAwD;IACxD,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;IACrC,oEAAoE;IACpE,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAElD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IAKnD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,eAAe,CAAO;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAmB;IACxC,OAAO,CAAC,mBAAmB,CAAC,CAAS;gBAEzB,KAAK,EAAE,mBAAmB;IAetC,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,QAAQ,IAAI,IAAI,CAEnB;IAED,IAAI,QAAQ,IAAI,sBAAsB,CAErC;IAED,4CAA4C;IAC5C,IAAI,KAAK,IAAI,mBAAmB,CAE/B;IAED,0CAA0C;IAC1C,IAAI,cAAc,IAAI,IAAI,CAEzB;IAED,kDAAkD;IAClD,IAAI,WAAW,IAAI,yBAAyB,CAO3C;IAED,oEAAoE;IACpE,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,8DAA8D;IAC9D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAIzC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrC,QAAQ,IAAI,IAAI;IAIhB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlC;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO;IAIlE;;;;OAIG;IACH,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO;IAIhE;;;;;;;OAOG;IACH,UAAU,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,OAAO;IASnE,OAAO,CAAC,WAAW;IAanB,OAAO,IAAI,mBAAmB;IAiB9B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC,GAAG;QACzF,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,IAAI,CAAC;KACjB,GAAG,cAAc;CAQnB"}

package/dist/domain/entities/federation-node.js

@@ -0,0 +1,152 @@
+import { TrustLevel } from './trust-level.js';
+import { FederationNodeState, canTransition, } from '../value-objects/federation-node-state.js';
+export class FederationNode {
+    nodeId;
+    publicKey;
+    endpoint;
+    capabilities;
+    _trustLevel;
+    _trustScore;
+    _lastSeen;
+    _metadata;
+    // Phase 2 state machine. Mutated only via suspend()/evict()/reactivate().
+    // Direct field writes are not permitted — every transition flows through
+    // canTransition() in federation-node-state.ts.
+    _state;
+    _stateChangedAt;
+    _stateReason;
+    _stateCorrelationId;
+    constructor(props) {
+        this.nodeId = props.nodeId;
+        this.publicKey = props.publicKey;
+        this.endpoint = props.endpoint;
+        this.capabilities = props.capabilities;
+        this._trustLevel = props.trustLevel;
+        this._trustScore = props.trustScore;
+        this._lastSeen = props.lastSeen;
+        this._metadata = props.metadata;
+        this._state = props.state ?? FederationNodeState.ACTIVE;
+        this._stateChangedAt = props.stateChangedAt ?? new Date();
+        this._stateReason = props.stateReason;
+        this._stateCorrelationId = props.stateCorrelationId;
+    }
+    get trustLevel() {
+        return this._trustLevel;
+    }
+    get trustScore() {
+        return this._trustScore;
+    }
+    get lastSeen() {
+        return this._lastSeen;
+    }
+    get metadata() {
+        return this._metadata;
+    }
+    /** Current peer state (ADR-097 Phase 2). */
+    get state() {
+        return this._state;
+    }
+    /** When the current state was entered. */
+    get stateChangedAt() {
+        return this._stateChangedAt;
+    }
+    /** Last-transition record for the audit trail. */
+    get stateRecord() {
+        return {
+            state: this._state,
+            changedAt: this._stateChangedAt,
+            reason: this._stateReason,
+            correlationId: this._stateCorrelationId,
+        };
+    }
+    /** Convenience predicate: is this peer accepting outbound sends? */
+    get isActive() {
+        return this._state === FederationNodeState.ACTIVE;
+    }
+    /** Convenience predicate: is this peer terminally evicted? */
+    get isEvicted() {
+        return this._state === FederationNodeState.EVICTED;
+    }
+    updateTrustLevel(level) {
+        this._trustLevel = level;
+    }
+    updateTrustScore(score) {
+        this._trustScore = Math.max(0, Math.min(1, score));
+    }
+    markSeen() {
+        this._lastSeen = new Date();
+    }
+    isStale(maxAgeMs) {
+        return Date.now() - this._lastSeen.getTime() > maxAgeMs;
+    }
+    /**
+     * Transition this peer to SUSPENDED. Legal from ACTIVE only — calling
+     * from SUSPENDED or EVICTED returns false (the entity is already at or
+     * past the breaker threshold, so a duplicate trip is a no-op).
+     *
+     * Returns true if the state changed, false if the call was rejected
+     * (illegal transition). The breaker treats false as "already handled."
+     */
+    suspend(reason, now = new Date()) {
+        return this._transition(FederationNodeState.SUSPENDED, reason, now);
+    }
+    /**
+     * Transition this peer to EVICTED. Legal from ACTIVE or SUSPENDED.
+     * EVICTED is terminal under normal flow — only `reactivate` (operator-
+     * initiated) can move the peer back to ACTIVE.
+     */
+    evict(reason, now = new Date()) {
+        return this._transition(FederationNodeState.EVICTED, reason, now);
+    }
+    /**
+     * Transition back to ACTIVE. Legal from SUSPENDED (after cooldown +
+     * probe success — the breaker is responsible for those checks; this
+     * entity does not gate on time) or from EVICTED (operator override).
+     *
+     * `correlationId` lets the caller record *why* they're reactivating
+     * (probe ID, operator ticket, etc.) for the audit trail.
+     */
+    reactivate(correlationId, now = new Date()) {
+        if (!canTransition(this._state, FederationNodeState.ACTIVE))
+            return false;
+        this._state = FederationNodeState.ACTIVE;
+        this._stateChangedAt = now;
+        this._stateReason = undefined;
+        this._stateCorrelationId = correlationId;
+        return true;
+    }
+    _transition(target, reason, now) {
+        if (!canTransition(this._state, target))
+            return false;
+        this._state = target;
+        this._stateChangedAt = now;
+        this._stateReason = reason.reason;
+        this._stateCorrelationId = reason.correlationId;
+        return true;
+    }
+    toProps() {
+        return {
+            nodeId: this.nodeId,
+            publicKey: this.publicKey,
+            endpoint: this.endpoint,
+            capabilities: this.capabilities,
+            trustLevel: this._trustLevel,
+            trustScore: this._trustScore,
+            lastSeen: this._lastSeen,
+            metadata: this._metadata,
+            state: this._state,
+            stateChangedAt: this._stateChangedAt,
+            stateReason: this._stateReason,
+            stateCorrelationId: this._stateCorrelationId,
+        };
+    }
+    static create(props) {
+        return new FederationNode({
+            ...props,
+            trustLevel: props.trustLevel ?? TrustLevel.UNTRUSTED,
+            trustScore: props.trustScore ?? 0,
+            lastSeen: props.lastSeen ?? new Date(),
+        });
+    }
+}
+//# sourceMappingURL=federation-node.js.map

package/dist/domain/entities/federation-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-node.js","sourceRoot":"","sources":["../../../src/domain/entities/federation-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EACL,mBAAmB,EAGnB,aAAa,GACd,MAAM,2CAA2C,CAAC;AA2CnD,MAAM,OAAO,cAAc;IAChB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,YAAY,CAA6B;IAE1C,WAAW,CAAa;IACxB,WAAW,CAAS;IACpB,SAAS,CAAO;IACP,SAAS,CAAyB;IAEnD,0EAA0E;IAC1E,yEAAyE;IACzE,+CAA+C;IACvC,MAAM,CAAsB;IAC5B,eAAe,CAAO;IACtB,YAAY,CAAoB;IAChC,mBAAmB,CAAU;IAErC,YAAY,KAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,IAAI,IAAI,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACtD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,0CAA0C;IAC1C,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,kDAAkD;IAClD,IAAI,WAAW;QACb,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,eAAe;YAC/B,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,aAAa,EAAE,IAAI,CAAC,mBAAmB;SACxC,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM,CAAC;IACpD,CAAC;IAED,8DAA8D;IAC9D,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAmB,CAAC,OAAO,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,KAAiB;QAChC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC1D,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,MAAwB,EAAE,MAAY,IAAI,IAAI,EAAE;QACtD,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAwB,EAAE,MAAY,IAAI,IAAI,EAAE;QACpD,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,aAAsB,EAAE,MAAY,IAAI,IAAI,EAAE;QACvD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,mBAAmB,GAAG,aAAa,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CACjB,MAA2B,EAC3B,MAAwB,EACxB,GAAS;QAET,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAIb;QACC,OAAO,IAAI,cAAc,CAAC;YACxB,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS;YACpD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/domain/entities/federation-session.d.ts

@@ -0,0 +1,55 @@
+import { TrustLevel } from './trust-level.js';
+export interface SessionMetrics {
+    messagesSent: number;
+    messagesReceived: number;
+    piiRedactions: number;
+    threatDetections: number;
+    hmacFailures: number;
+    totalInteractions: number;
+}
+export interface FederationSessionProps {
+    readonly sessionId: string;
+    readonly localNodeId: string;
+    readonly remoteNodeId: string;
+    readonly trustLevel: TrustLevel;
+    readonly negotiatedCapabilities: readonly string[];
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+    readonly heartbeatInterval: number;
+    readonly sessionToken: string;
+    readonly metrics: SessionMetrics;
+}
+export declare class FederationSession {
+    readonly sessionId: string;
+    readonly localNodeId: string;
+    readonly remoteNodeId: string;
+    readonly negotiatedCapabilities: readonly string[];
+    readonly createdAt: Date;
+    readonly heartbeatInterval: number;
+    readonly sessionToken: string;
+    private _trustLevel;
+    private _expiresAt;
+    private _lastHeartbeat;
+    private _metrics;
+    private _active;
+    constructor(props: FederationSessionProps);
+    get trustLevel(): TrustLevel;
+    get expiresAt(): Date;
+    get lastHeartbeat(): Date;
+    get metrics(): Readonly<SessionMetrics>;
+    get active(): boolean;
+    isExpired(): boolean;
+    isHeartbeatOverdue(): boolean;
+    recordHeartbeat(): void;
+    renew(newExpiresAt: Date): void;
+    updateTrustLevel(level: TrustLevel): void;
+    recordMessageSent(): void;
+    recordMessageReceived(): void;
+    recordPiiRedaction(): void;
+    recordThreatDetection(): void;
+    recordHmacFailure(): void;
+    terminate(): void;
+    toProps(): FederationSessionProps;
+    static createMetrics(): SessionMetrics;
+}
+//# sourceMappingURL=federation-session.d.ts.map

package/dist/domain/entities/federation-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-session.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/federation-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,UAAU,CAAO;IACzB,OAAO,CAAC,cAAc,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,OAAO,CAAU;gBAEb,KAAK,EAAE,sBAAsB;IAezC,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,SAAS,IAAI,IAAI,CAEpB;IAED,IAAI,aAAa,IAAI,IAAI,CAExB;IAED,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,CAAC,CAEtC;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,OAAO;IAK7B,eAAe,IAAI,IAAI;IAIvB,KAAK,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI;IAK/B,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAIzC,iBAAiB,IAAI,IAAI;IAKzB,qBAAqB,IAAI,IAAI;IAK7B,kBAAkB,IAAI,IAAI;IAI1B,qBAAqB,IAAI,IAAI;IAI7B,iBAAiB,IAAI,IAAI;IAIzB,SAAS,IAAI,IAAI;IAIjB,OAAO,IAAI,sBAAsB;IAejC,MAAM,CAAC,aAAa,IAAI,cAAc;CAUvC"}

package/dist/domain/entities/federation-session.js

@@ -0,0 +1,105 @@
+export class FederationSession {
+    sessionId;
+    localNodeId;
+    remoteNodeId;
+    negotiatedCapabilities;
+    createdAt;
+    heartbeatInterval;
+    sessionToken;
+    _trustLevel;
+    _expiresAt;
+    _lastHeartbeat;
+    _metrics;
+    _active;
+    constructor(props) {
+        this.sessionId = props.sessionId;
+        this.localNodeId = props.localNodeId;
+        this.remoteNodeId = props.remoteNodeId;
+        this._trustLevel = props.trustLevel;
+        this.negotiatedCapabilities = props.negotiatedCapabilities;
+        this.createdAt = props.createdAt;
+        this._expiresAt = props.expiresAt;
+        this.heartbeatInterval = props.heartbeatInterval;
+        this.sessionToken = props.sessionToken;
+        this._metrics = { ...props.metrics };
+        this._lastHeartbeat = new Date();
+        this._active = true;
+    }
+    get trustLevel() {
+        return this._trustLevel;
+    }
+    get expiresAt() {
+        return this._expiresAt;
+    }
+    get lastHeartbeat() {
+        return this._lastHeartbeat;
+    }
+    get metrics() {
+        return this._metrics;
+    }
+    get active() {
+        return this._active;
+    }
+    isExpired() {
+        return Date.now() >= this._expiresAt.getTime();
+    }
+    isHeartbeatOverdue() {
+        const overdueThreshold = this.heartbeatInterval * 3;
+        return Date.now() - this._lastHeartbeat.getTime() > overdueThreshold;
+    }
+    recordHeartbeat() {
+        this._lastHeartbeat = new Date();
+    }
+    renew(newExpiresAt) {
+        this._expiresAt = newExpiresAt;
+        this._lastHeartbeat = new Date();
+    }
+    updateTrustLevel(level) {
+        this._trustLevel = level;
+    }
+    recordMessageSent() {
+        this._metrics.messagesSent++;
+        this._metrics.totalInteractions++;
+    }
+    recordMessageReceived() {
+        this._metrics.messagesReceived++;
+        this._metrics.totalInteractions++;
+    }
+    recordPiiRedaction() {
+        this._metrics.piiRedactions++;
+    }
+    recordThreatDetection() {
+        this._metrics.threatDetections++;
+    }
+    recordHmacFailure() {
+        this._metrics.hmacFailures++;
+    }
+    terminate() {
+        this._active = false;
+    }
+    toProps() {
+        return {
+            sessionId: this.sessionId,
+            localNodeId: this.localNodeId,
+            remoteNodeId: this.remoteNodeId,
+            trustLevel: this._trustLevel,
+            negotiatedCapabilities: this.negotiatedCapabilities,
+            createdAt: this.createdAt,
+            expiresAt: this._expiresAt,
+            heartbeatInterval: this.heartbeatInterval,
+            sessionToken: this.sessionToken,
+            metrics: { ...this._metrics },
+        };
+    }
+    static createMetrics() {
+        return {
+            messagesSent: 0,
+            messagesReceived: 0,
+            piiRedactions: 0,
+            threatDetections: 0,
+            hmacFailures: 0,
+            totalInteractions: 0,
+        };
+    }
+}
+//# sourceMappingURL=federation-session.js.map

package/dist/domain/entities/federation-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-session.js","sourceRoot":"","sources":["../../../src/domain/entities/federation-session.ts"],"names":[],"mappings":"AAwBA,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,sBAAsB,CAAoB;IAC1C,SAAS,CAAO;IAChB,iBAAiB,CAAS;IAC1B,YAAY,CAAS;IAEtB,WAAW,CAAa;IACxB,UAAU,CAAO;IACjB,cAAc,CAAO;IACrB,QAAQ,CAAiB;IACzB,OAAO,CAAU;IAEzB,YAAY,KAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,kBAAkB;QAChB,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC;IACvE,CAAC;IAED,eAAe;QACb,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,YAAkB;QACtB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gBAAgB,CAAC,KAAiB;QAChC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACpC,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACpC,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAChC,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IACnC,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IAED,SAAS;QACP,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO;YACL,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,CAAC;YAChB,gBAAgB,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/entities/trust-level.d.ts

@@ -0,0 +1,17 @@
+export declare enum TrustLevel {
+    UNTRUSTED = 0,
+    VERIFIED = 1,
+    ATTESTED = 2,
+    TRUSTED = 3,
+    PRIVILEGED = 4
+}
+export interface TrustTransitionThreshold {
+    upgradeScore: number;
+    downgradeScore: number;
+    minInteractions: number;
+}
+export declare const TRUST_TRANSITION_THRESHOLDS: Record<string, TrustTransitionThreshold>;
+export declare const CAPABILITY_GATES: Record<TrustLevel, readonly string[]>;
+export declare function isOperationAllowed(trustLevel: TrustLevel, operation: string): boolean;
+export declare function getTrustLevelLabel(level: TrustLevel): string;
+//# sourceMappingURL=trust-level.d.ts.map

package/dist/domain/entities/trust-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-level.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/trust-level.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,SAAS,IAAI;IACb,QAAQ,IAAI;IACZ,QAAQ,IAAI;IACZ,OAAO,IAAI;IACX,UAAU,IAAI;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAIhF,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAMlE,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAS5D"}

package/dist/domain/entities/trust-level.js

@@ -0,0 +1,35 @@
+export var TrustLevel;
+(function (TrustLevel) {
+    TrustLevel[TrustLevel["UNTRUSTED"] = 0] = "UNTRUSTED";
+    TrustLevel[TrustLevel["VERIFIED"] = 1] = "VERIFIED";
+    TrustLevel[TrustLevel["ATTESTED"] = 2] = "ATTESTED";
+    TrustLevel[TrustLevel["TRUSTED"] = 3] = "TRUSTED";
+    TrustLevel[TrustLevel["PRIVILEGED"] = 4] = "PRIVILEGED";
+})(TrustLevel || (TrustLevel = {}));
+export const TRUST_TRANSITION_THRESHOLDS = {
+    '1->2': { upgradeScore: 0.7, downgradeScore: 0.5, minInteractions: 50 },
+    '2->3': { upgradeScore: 0.85, downgradeScore: 0.65, minInteractions: 500 },
+    '3->4': { upgradeScore: 0.95, downgradeScore: 0.8, minInteractions: 5000 },
+};
+export const CAPABILITY_GATES = {
+    [TrustLevel.UNTRUSTED]: ['discovery'],
+    [TrustLevel.VERIFIED]: ['discovery', 'status', 'ping'],
+    [TrustLevel.ATTESTED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted'],
+    [TrustLevel.TRUSTED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted', 'share-context', 'collaborative-task'],
+    [TrustLevel.PRIVILEGED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted', 'share-context', 'collaborative-task', 'full-memory', 'remote-spawn'],
+};
+export function isOperationAllowed(trustLevel, operation) {
+    const allowed = CAPABILITY_GATES[trustLevel];
+    return allowed.includes(operation);
+}
+export function getTrustLevelLabel(level) {
+    const labels = {
+        [TrustLevel.UNTRUSTED]: 'UNTRUSTED',
+        [TrustLevel.VERIFIED]: 'VERIFIED',
+        [TrustLevel.ATTESTED]: 'ATTESTED',
+        [TrustLevel.TRUSTED]: 'TRUSTED',
+        [TrustLevel.PRIVILEGED]: 'PRIVILEGED',
+    };
+    return labels[level];
+}
+//# sourceMappingURL=trust-level.js.map

package/dist/domain/entities/trust-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-level.js","sourceRoot":"","sources":["../../../src/domain/entities/trust-level.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,qDAAa,CAAA;IACb,mDAAY,CAAA;IACZ,mDAAY,CAAA;IACZ,iDAAW,CAAA;IACX,uDAAc,CAAA;AAChB,CAAC,EANW,UAAU,KAAV,UAAU,QAMrB;AAQD,MAAM,CAAC,MAAM,2BAA2B,GAA6C;IACnF,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE;IACvE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE;IAC1E,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE;CAC3E,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAA0C;IACrE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC;IACrC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC;IAC3F,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,CAAC;IACjI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,CAAC;CACpK,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,UAAsB,EAAE,SAAiB;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,MAAM,GAA+B;QACzC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW;QACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU;QACjC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU;QACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,SAAS;QAC/B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,YAAY;KACtC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/domain/services/audit-service.d.ts

@@ -0,0 +1,69 @@
+export type FederationAuditEventType = 'peer_discovered' | 'peer_manifest_published' | 'handshake_initiated' | 'handshake_completed' | 'handshake_failed' | 'handshake_rejected' | 'session_created' | 'session_renewed' | 'session_expired' | 'session_terminated' | 'message_sent' | 'message_received' | 'message_rejected' | 'message_timeout' | 'pii_detected' | 'pii_stripped' | 'pii_blocked' | 'threat_detected' | 'threat_blocked' | 'threat_learned' | 'claim_checked' | 'claim_denied' | 'trust_level_changed' | 'consensus_proposed' | 'consensus_voted' | 'consensus_reached' | 'consensus_failed';
+export type AuditSeverity = 'info' | 'warn' | 'error' | 'critical';
+export type AuditCategory = 'discovery' | 'handshake' | 'message' | 'pii' | 'security' | 'consensus';
+export type ComplianceMode = 'hipaa' | 'soc2' | 'gdpr' | 'none';
+export interface FederationAuditEvent {
+    readonly eventId: string;
+    readonly timestamp: string;
+    readonly nodeId: string;
+    readonly sessionId?: string;
+    readonly eventType: FederationAuditEventType;
+    readonly severity: AuditSeverity;
+    readonly category: AuditCategory;
+    readonly sourceNodeId?: string;
+    readonly targetNodeId?: string;
+    readonly agentId?: string;
+    readonly trustLevel?: number;
+    readonly piiDetected?: boolean;
+    readonly piiTypesFound?: string[];
+    readonly piiAction?: string;
+    readonly threatDetected?: boolean;
+    readonly threatTypes?: string[];
+    readonly claimsChecked?: string[];
+    readonly claimsResult?: 'granted' | 'denied';
+    readonly latencyMs?: number;
+    readonly messageSizeBytes?: number;
+    readonly complianceMode?: ComplianceMode;
+    readonly dataResidency?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface AuditQuery {
+    readonly eventType?: FederationAuditEventType;
+    readonly severity?: AuditSeverity;
+    readonly category?: AuditCategory;
+    readonly nodeId?: string;
+    readonly sessionId?: string;
+    readonly since?: Date;
+    readonly until?: Date;
+    readonly limit?: number;
+    readonly offset?: number;
+}
+export type AuditExportFormat = 'json' | 'csv' | 'ndjson';
+export interface AuditServiceDeps {
+    generateEventId: () => string;
+    getLocalNodeId: () => string;
+    persistEvent: (event: FederationAuditEvent) => Promise<void>;
+    queryEvents: (query: AuditQuery) => Promise<FederationAuditEvent[]>;
+    onAuditEvent?: (event: FederationAuditEvent) => void;
+}
+export interface AuditServiceConfig {
+    readonly complianceMode: ComplianceMode;
+    readonly dataResidency?: string;
+    readonly retentionDays: number;
+    readonly batchSize: number;
+}
+export declare class AuditService {
+    private readonly deps;
+    private readonly config;
+    private readonly buffer;
+    constructor(deps: AuditServiceDeps, config?: Partial<AuditServiceConfig>);
+    log(eventType: FederationAuditEventType, details?: Partial<Omit<FederationAuditEvent, 'eventId' | 'timestamp' | 'nodeId' | 'eventType' | 'severity' | 'category' | 'complianceMode'>>): Promise<FederationAuditEvent>;
+    query(query: AuditQuery): Promise<FederationAuditEvent[]>;
+    export(query: AuditQuery, format: AuditExportFormat): Promise<string>;
+    flush(): Promise<void>;
+    getBufferSize(): number;
+    private buildEvent;
+    private applyHipaaCompliance;
+    private toCsv;
+}
+//# sourceMappingURL=audit-service.d.ts.map

package/dist/domain/services/audit-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/audit-service.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GAAG,yBAAyB,GAC7C,qBAAqB,GAAG,qBAAqB,GAC7C,kBAAkB,GAAG,oBAAoB,GACzC,iBAAiB,GAAG,iBAAiB,GACrC,iBAAiB,GAAG,oBAAoB,GACxC,cAAc,GAAG,kBAAkB,GACnC,kBAAkB,GAAG,iBAAiB,GACtC,cAAc,GAAG,cAAc,GAAG,aAAa,GAC/C,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GACvD,eAAe,GAAG,cAAc,GAAG,qBAAqB,GACxD,oBAAoB,GAAG,iBAAiB,GACxC,mBAAmB,GAAG,kBAAkB,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,CAAC;AAErG,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAE7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACpE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAoED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;gBAEpC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAMlE,GAAG,CACP,SAAS,EAAE,wBAAwB,EACnC,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,gBAAgB,CAAC,CAAM,GAC/I,OAAO,CAAC,oBAAoB,CAAC;IAa1B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAKzD,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAarE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,KAAK;CAmBd"}