@claude-flow/plugin-agent-federation 1.0.0-alpha.10

package/dist/domain/services/pii-pipeline-service.js

@@ -0,0 +1,208 @@
+import { TrustLevel } from '../entities/trust-level.js';
+const DEFAULT_CONFIDENCE_THRESHOLDS = {
+    autoBlock: 0.95,
+    autoRedact: 0.85,
+    flagForReview: 0.6,
+    ignore: 0.6,
+};
+const PII_PATTERNS = {
+    email: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+    ssn: /\b\d{3}-\d{2}-\d{4}\b/g,
+    credit_card: /\b(?:\d{4}[-\s]?){3}\d{4}\b/g,
+    api_key: /\b(?:sk-[a-zA-Z0-9]{20,}|key-[a-zA-Z0-9]{20,})\b/g,
+    password: /(?:password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
+    name: /\b(?:Mr\.|Mrs\.|Ms\.|Dr\.)\s+[A-Z][a-z]+(?:\s+[A-Z][a-z]+)+\b/g,
+    address: /\b\d{1,5}\s+(?:[A-Z][a-z]+\s+){1,3}(?:St|Ave|Blvd|Dr|Ln|Rd|Way|Ct)\b/g,
+    phone: /(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g,
+    ip_address: /\b(?:\d{1,3}\.){3}\d{1,3}\b|(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}/g,
+    jwt: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+    aws_key: /\bAKIA[0-9A-Z]{16}\b/g,
+    private_key: /-----BEGIN\s+(?:RSA\s+|EC\s+|DSA\s+)?PRIVATE\s+KEY-----/g,
+    database_url: /(?:postgres|mysql|mongodb|redis):\/\/[^\s]+/g,
+    github_token: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}\b/g,
+};
+const DEFAULT_POLICY_MATRIX = {
+    ssn: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    credit_card: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    api_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    password: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    email: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    phone: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    name: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'redact', [TrustLevel.PRIVILEGED]: 'pass' },
+    ip_address: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'hash', [TrustLevel.TRUSTED]: 'hash', [TrustLevel.PRIVILEGED]: 'pass' },
+    jwt: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    aws_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    private_key: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'block' },
+    database_url: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    github_token: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'block', [TrustLevel.TRUSTED]: 'block', [TrustLevel.PRIVILEGED]: 'redact' },
+    address: { [TrustLevel.UNTRUSTED]: 'block', [TrustLevel.VERIFIED]: 'block', [TrustLevel.ATTESTED]: 'redact', [TrustLevel.TRUSTED]: 'redact', [TrustLevel.PRIVILEGED]: 'pass' },
+};
+export class PIIPipelineService {
+    deps;
+    policy;
+    calibrations;
+    confidenceThresholds;
+    constructor(deps, policy, confidenceThresholds) {
+        this.deps = deps;
+        this.policy = {
+            defaultAction: policy?.defaultAction ?? 'redact',
+            overrides: policy?.overrides ?? {},
+            hashAlgorithm: policy?.hashAlgorithm ?? 'sha256',
+            hashSalt: policy?.hashSalt ?? '',
+            redactionPlaceholder: policy?.redactionPlaceholder ?? '[REDACTED:{type}]',
+        };
+        this.calibrations = new Map();
+        this.confidenceThresholds = { ...DEFAULT_CONFIDENCE_THRESHOLDS, ...confidenceThresholds };
+    }
+    detect(text) {
+        const detections = [];
+        for (const [type, pattern] of Object.entries(PII_PATTERNS)) {
+            const regex = new RegExp(pattern.source, pattern.flags);
+            let match;
+            while ((match = regex.exec(text)) !== null) {
+                const contextStart = Math.max(0, match.index - 20);
+                const contextEnd = Math.min(text.length, match.index + match[0].length + 20);
+                const confidence = this.computeConfidence(type, match[0], text);
+                detections.push({
+                    type: type,
+                    value: match[0],
+                    confidence,
+                    offset: match.index,
+                    context: text.slice(contextStart, contextEnd),
+                });
+            }
+        }
+        return detections.sort((a, b) => b.offset - a.offset);
+    }
+    classify(detections) {
+        const classified = new Map();
+        for (const detection of detections) {
+            const existing = classified.get(detection.type) ?? [];
+            existing.push(detection);
+            classified.set(detection.type, existing);
+        }
+        return classified;
+    }
+    evaluate(detection, trustLevel) {
+        if (detection.confidence < this.getEffectiveThreshold(detection.type)) {
+            return 'pass';
+        }
+        const override = this.policy.overrides[detection.type];
+        if (override?.trustLevelOverride?.[trustLevel]) {
+            return override.trustLevelOverride[trustLevel];
+        }
+        const defaultMatrix = DEFAULT_POLICY_MATRIX[detection.type];
+        if (defaultMatrix) {
+            return defaultMatrix[trustLevel];
+        }
+        return this.policy.defaultAction;
+    }
+    transform(text, trustLevel) {
+        const detections = this.detect(text);
+        const actionsApplied = [];
+        let transformedText = text;
+        let blocked = false;
+        const sortedDetections = [...detections].sort((a, b) => b.offset - a.offset);
+        for (const detection of sortedDetections) {
+            const action = this.evaluate(detection, trustLevel);
+            actionsApplied.push({ type: detection.type, action });
+            switch (action) {
+                case 'block':
+                    blocked = true;
+                    break;
+                case 'redact': {
+                    const placeholder = this.policy.redactionPlaceholder.replace('{type}', detection.type);
+                    transformedText =
+                        transformedText.slice(0, detection.offset) +
+                            placeholder +
+                            transformedText.slice(detection.offset + detection.value.length);
+                    break;
+                }
+                case 'hash': {
+                    const hashed = this.deps.hashFunction(detection.value, this.policy.hashSalt);
+                    const hashPlaceholder = `[HASH:${detection.type}:${hashed.slice(0, 8)}]`;
+                    transformedText =
+                        transformedText.slice(0, detection.offset) +
+                            hashPlaceholder +
+                            transformedText.slice(detection.offset + detection.value.length);
+                    break;
+                }
+                case 'pass':
+                    break;
+            }
+        }
+        return {
+            originalText: text,
+            transformedText: blocked ? '' : transformedText,
+            detections,
+            actionsApplied,
+            blocked,
+        };
+    }
+    updateCalibration(type, calibration) {
+        this.calibrations.set(type, calibration);
+    }
+    getCalibration(type) {
+        return this.calibrations.get(type);
+    }
+    computeConfidence(type, value, _fullText) {
+        const calibration = this.calibrations.get(type);
+        let baseConfidence;
+        switch (type) {
+            case 'ssn':
+            case 'credit_card':
+            case 'aws_key':
+            case 'github_token':
+                baseConfidence = 0.95;
+                break;
+            case 'email':
+            case 'jwt':
+            case 'private_key':
+            case 'database_url':
+                baseConfidence = 0.9;
+                break;
+            case 'api_key':
+            case 'password':
+                baseConfidence = 0.85;
+                break;
+            case 'phone':
+            case 'ip_address':
+                baseConfidence = 0.8;
+                break;
+            case 'name':
+            case 'address':
+                baseConfidence = 0.7;
+                break;
+            default:
+                baseConfidence = 0.75;
+        }
+        if (value.length < 5) {
+            baseConfidence *= 0.8;
+        }
+        if (calibration && calibration.totalOverrides > 10) {
+            const fpAdjustment = calibration.falsePositiveRate * 0.1;
+            baseConfidence = Math.max(0.1, baseConfidence - fpAdjustment);
+        }
+        return Math.min(1.0, Math.max(0.0, baseConfidence));
+    }
+    getEffectiveThreshold(type) {
+        const calibration = this.calibrations.get(type);
+        if (calibration && calibration.totalOverrides > 10) {
+            return calibration.adjustedThreshold;
+        }
+        return this.confidenceThresholds.ignore;
+    }
+    static defaultPolicy() {
+        return {
+            defaultAction: 'redact',
+            overrides: {},
+            hashAlgorithm: 'sha256',
+            hashSalt: '',
+            redactionPlaceholder: '[REDACTED:{type}]',
+        };
+    }
+    static defaultPolicyMatrix() {
+        return { ...DEFAULT_POLICY_MATRIX };
+    }
+}
+//# sourceMappingURL=pii-pipeline-service.js.map

package/dist/domain/services/pii-pipeline-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-pipeline-service.js","sourceRoot":"","sources":["../../../src/domain/services/pii-pipeline-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAmDxD,MAAM,6BAA6B,GAA4B;IAC7D,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,aAAa,EAAE,GAAG;IAClB,MAAM,EAAE,GAAG;CACZ,CAAC;AAEF,MAAM,YAAY,GAA4B;IAC5C,KAAK,EAAE,sDAAsD;IAC7D,GAAG,EAAE,wBAAwB;IAC7B,WAAW,EAAE,8BAA8B;IAC3C,OAAO,EAAE,mDAAmD;IAC5D,QAAQ,EAAE,0DAA0D;IACpE,IAAI,EAAE,gEAAgE;IACtE,OAAO,EAAE,uEAAuE;IAChF,KAAK,EAAE,wDAAwD;IAC/D,UAAU,EAAE,uEAAuE;IACnF,GAAG,EAAE,oEAAoE;IACzE,OAAO,EAAE,uBAAuB;IAChC,WAAW,EAAE,0DAA0D;IACvE,YAAY,EAAE,8CAA8C;IAC5D,YAAY,EAAE,gDAAgD;CAC/D,CAAC;AAEF,MAAM,qBAAqB,GAAmD;IAC5E,GAAG,EAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,WAAW,EAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,QAAQ,EAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,KAAK,EAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACjL,KAAK,EAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACjL,IAAI,EAAU,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IACnL,UAAU,EAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;IAC/K,GAAG,EAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,WAAW,EAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE;IAClL,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE;IACnL,OAAO,EAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE;CACpL,CAAC;AAMF,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAyB;IAC7B,MAAM,CAAkB;IACxB,YAAY,CAA+B;IAC3C,oBAAoB,CAA0B;IAE/D,YACE,IAA4B,EAC5B,MAAiC,EACjC,oBAAuD;QAEvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,QAAQ;YAChD,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;YAClC,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,QAAQ;YAChD,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE;YAChC,oBAAoB,EAAE,MAAM,EAAE,oBAAoB,IAAI,mBAAmB;SAC1E,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,oBAAoB,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAA6B,CAAC;YAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;gBAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAe,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAE3E,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,IAAe;oBACrB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,UAAU;oBACV,MAAM,EAAE,KAAK,CAAC,KAAK;oBACnB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,QAAQ,CAAC,UAA0B;QACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;QAEtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,SAAuB,EAAE,UAAsB;QACtD,IAAI,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,UAAsB;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,cAAc,GAA2C,EAAE,CAAC;QAClE,IAAI,eAAe,GAAG,IAAI,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,gBAAgB,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAE7E,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACpD,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAEtD,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,OAAO;oBACV,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;oBACvF,eAAe;wBACb,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC;4BAC1C,WAAW;4BACX,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC7E,MAAM,eAAe,GAAG,SAAS,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;oBACzE,eAAe;wBACb,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC;4BAC1C,eAAe;4BACf,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM;gBACR,CAAC;gBACD,KAAK,MAAM;oBACT,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe;YAC/C,UAAU;YACV,cAAc;YACd,OAAO;SACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,IAAa,EAAE,WAA2B;QAC1D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,IAAa;QAC1B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAEO,iBAAiB,CAAC,IAAa,EAAE,KAAa,EAAE,SAAiB;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,cAAsB,CAAC;QAE3B,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,KAAK,CAAC;YACX,KAAK,aAAa,CAAC;YACnB,KAAK,SAAS,CAAC;YACf,KAAK,cAAc;gBACjB,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,KAAK,CAAC;YACX,KAAK,aAAa,CAAC;YACnB,KAAK,cAAc;gBACjB,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS,CAAC;YACf,KAAK,UAAU;gBACb,cAAc,GAAG,IAAI,CAAC;gBACtB,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,YAAY;gBACf,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS;gBACZ,cAAc,GAAG,GAAG,CAAC;gBACrB,MAAM;YACR;gBACE,cAAc,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,cAAc,IAAI,GAAG,CAAC;QACxB,CAAC;QAED,IAAI,WAAW,IAAI,WAAW,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,WAAW,CAAC,iBAAiB,GAAG,GAAG,CAAC;YACzD,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,GAAG,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,WAAW,IAAI,WAAW,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACnD,OAAO,WAAW,CAAC,iBAAiB,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO;YACL,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,mBAAmB;QACxB,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/domain/services/routing-service.d.ts

@@ -0,0 +1,51 @@
+import { FederationEnvelope, type FederationEnvelopeProps, type FederationMessageType } from '../entities/federation-envelope.js';
+import { FederationSession } from '../entities/federation-session.js';
+export type RoutingMode = 'direct' | 'broadcast' | 'consensus';
+export interface RoutingResult {
+    readonly success: boolean;
+    readonly mode: RoutingMode;
+    readonly envelopeId: string;
+    readonly targetNodeIds: readonly string[];
+    readonly error?: string;
+    readonly latencyMs?: number;
+}
+export interface ConsensusProposal {
+    readonly proposalId: string;
+    readonly proposerNodeId: string;
+    readonly messageType: FederationMessageType;
+    readonly payload: unknown;
+    readonly quorumRequired: number;
+    readonly votes: Map<string, boolean>;
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+}
+export interface RoutingServiceDeps {
+    generateEnvelopeId: () => string;
+    generateNonce: () => string;
+    signEnvelope: (payload: string, sessionToken: string) => string;
+    verifyEnvelope: (payload: string, signature: string, sessionToken: string) => boolean;
+    scanPii: (text: string, trustLevel: number) => {
+        transformedText: string;
+        scanResult: FederationEnvelopeProps['piiScanResult'];
+    };
+    sendToNode: (nodeId: string, envelope: FederationEnvelope) => Promise<void>;
+    getActiveSessions: () => FederationSession[];
+    getLocalNodeId: () => string;
+}
+export declare class RoutingService {
+    private readonly deps;
+    private readonly pendingProposals;
+    constructor(deps: RoutingServiceDeps);
+    selectMode(messageType: FederationMessageType): RoutingMode;
+    send<T>(session: FederationSession, messageType: FederationMessageType, payload: T): Promise<RoutingResult>;
+    broadcast<T>(messageType: FederationMessageType, payload: T): Promise<RoutingResult[]>;
+    propose<T>(messageType: FederationMessageType, payload: T, quorumFraction?: number): Promise<ConsensusProposal>;
+    recordVote(proposalId: string, nodeId: string, vote: boolean): boolean;
+    isConsensusReached(proposalId: string): {
+        reached: boolean;
+        approved: boolean;
+    };
+    verifyInboundEnvelope(envelope: FederationEnvelope, sessionToken: string): boolean;
+    cleanExpiredProposals(): void;
+}
+//# sourceMappingURL=routing-service.d.ts.map

package/dist/domain/services/routing-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/routing-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAE3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,MAAM,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IAChE,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;IACtF,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,uBAAuB,CAAC,eAAe,CAAC,CAAA;KAAE,CAAC;IACjI,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,iBAAiB,EAAE,MAAM,iBAAiB,EAAE,CAAC;IAC7C,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiC;gBAEtD,IAAI,EAAE,kBAAkB;IAKpC,UAAU,CAAC,WAAW,EAAE,qBAAqB,GAAG,WAAW;IAUrD,IAAI,CAAC,CAAC,EACV,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,CAAC;IAmEnB,SAAS,CAAC,CAAC,EACf,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,EAAE,CAAC;IAYrB,OAAO,CAAC,CAAC,EACb,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,EACV,cAAc,GAAE,MAAc,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IA4B7B,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO;IAatE,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;IAkB/E,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO;IAKlF,qBAAqB,IAAI,IAAI;CAQ9B"}

package/dist/domain/services/routing-service.js

@@ -0,0 +1,147 @@
+import { FederationEnvelope, CONSENSUS_REQUIRED_TYPES, } from '../entities/federation-envelope.js';
+export class RoutingService {
+    deps;
+    pendingProposals;
+    constructor(deps) {
+        this.deps = deps;
+        this.pendingProposals = new Map();
+    }
+    selectMode(messageType) {
+        if (CONSENSUS_REQUIRED_TYPES.has(messageType)) {
+            return 'consensus';
+        }
+        if (messageType === 'status-broadcast') {
+            return 'broadcast';
+        }
+        return 'direct';
+    }
+    async send(session, messageType, payload) {
+        const startTime = Date.now();
+        if (!session.active) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [], error: 'Session is not active' };
+        }
+        if (session.isExpired()) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [], error: 'Session has expired' };
+        }
+        const payloadStr = JSON.stringify(payload);
+        const { transformedText, scanResult } = this.deps.scanPii(payloadStr, session.trustLevel);
+        if (scanResult.piiFound && scanResult.actionsApplied.includes('block')) {
+            return { success: false, mode: 'direct', envelopeId: '', targetNodeIds: [session.remoteNodeId], error: 'Message blocked by PII policy' };
+        }
+        const envelopeId = this.deps.generateEnvelopeId();
+        const nonce = this.deps.generateNonce();
+        const timestamp = new Date();
+        const unsignedPayload = JSON.stringify({
+            envelopeId,
+            sourceNodeId: session.localNodeId,
+            targetNodeId: session.remoteNodeId,
+            sessionId: session.sessionId,
+            messageType,
+            payload: JSON.parse(transformedText),
+            timestamp: timestamp.toISOString(),
+            nonce,
+        });
+        const hmacSignature = this.deps.signEnvelope(unsignedPayload, session.sessionToken);
+        const envelope = new FederationEnvelope({
+            envelopeId,
+            sourceNodeId: session.localNodeId,
+            targetNodeId: session.remoteNodeId,
+            sessionId: session.sessionId,
+            messageType,
+            payload: JSON.parse(transformedText),
+            timestamp,
+            nonce,
+            hmacSignature,
+            piiScanResult: scanResult,
+        });
+        try {
+            await this.deps.sendToNode(session.remoteNodeId, envelope);
+            session.recordMessageSent();
+            if (scanResult.piiFound) {
+                session.recordPiiRedaction();
+            }
+            return {
+                success: true,
+                mode: 'direct',
+                envelopeId,
+                targetNodeIds: [session.remoteNodeId],
+                latencyMs: Date.now() - startTime,
+            };
+        }
+        catch (err) {
+            const errorMsg = err instanceof Error ? err.message : String(err);
+            return { success: false, mode: 'direct', envelopeId, targetNodeIds: [session.remoteNodeId], error: errorMsg };
+        }
+    }
+    async broadcast(messageType, payload) {
+        const sessions = this.deps.getActiveSessions().filter(s => s.active && !s.isExpired());
+        const results = [];
+        for (const session of sessions) {
+            const result = await this.send(session, messageType, payload);
+            results.push(result);
+        }
+        return results;
+    }
+    async propose(messageType, payload, quorumFraction = 2 / 3) {
+        const sessions = this.deps.getActiveSessions().filter(s => s.active && !s.isExpired());
+        const quorumRequired = Math.ceil(sessions.length * quorumFraction);
+        const proposal = {
+            proposalId: this.deps.generateEnvelopeId(),
+            proposerNodeId: this.deps.getLocalNodeId(),
+            messageType,
+            payload,
+            quorumRequired,
+            votes: new Map(),
+            createdAt: new Date(),
+            expiresAt: new Date(Date.now() + 30_000),
+        };
+        this.pendingProposals.set(proposal.proposalId, proposal);
+        await this.broadcast(messageType, {
+            type: 'consensus-proposal',
+            proposalId: proposal.proposalId,
+            messageType,
+            payload,
+            quorumRequired,
+        });
+        return proposal;
+    }
+    recordVote(proposalId, nodeId, vote) {
+        const proposal = this.pendingProposals.get(proposalId);
+        if (!proposal)
+            return false;
+        if (new Date() > proposal.expiresAt) {
+            this.pendingProposals.delete(proposalId);
+            return false;
+        }
+        proposal.votes.set(nodeId, vote);
+        return true;
+    }
+    isConsensusReached(proposalId) {
+        const proposal = this.pendingProposals.get(proposalId);
+        if (!proposal)
+            return { reached: false, approved: false };
+        const approvals = Array.from(proposal.votes.values()).filter(v => v).length;
+        if (approvals >= proposal.quorumRequired) {
+            return { reached: true, approved: true };
+        }
+        const rejections = Array.from(proposal.votes.values()).filter(v => !v).length;
+        const totalVoters = this.deps.getActiveSessions().length;
+        if (rejections > totalVoters - proposal.quorumRequired) {
+            return { reached: true, approved: false };
+        }
+        return { reached: false, approved: false };
+    }
+    verifyInboundEnvelope(envelope, sessionToken) {
+        const signablePayload = envelope.toSignablePayload();
+        return this.deps.verifyEnvelope(signablePayload, envelope.hmacSignature, sessionToken);
+    }
+    cleanExpiredProposals() {
+        const now = new Date();
+        for (const [id, proposal] of this.pendingProposals) {
+            if (now > proposal.expiresAt) {
+                this.pendingProposals.delete(id);
+            }
+        }
+    }
+}
+//# sourceMappingURL=routing-service.js.map

package/dist/domain/services/routing-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing-service.js","sourceRoot":"","sources":["../../../src/domain/services/routing-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAGlB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAoC5C,MAAM,OAAO,cAAc;IACR,IAAI,CAAqB;IACzB,gBAAgB,CAAiC;IAElE,YAAY,IAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,WAAkC;QAC3C,IAAI,wBAAwB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;YACvC,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,OAA0B,EAC1B,WAAkC,EAClC,OAAU;QAEV,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC/G,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC7G,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1F,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC3I,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC;YACrC,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACpC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAEpF,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAI;YACzC,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAM;YACzC,SAAS;YACT,KAAK;YACL,aAAa;YACb,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ;gBACd,UAAU;gBACV,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAkC,EAClC,OAAU;QAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAkC,EAClC,OAAU,EACV,iBAAyB,CAAC,GAAG,CAAC;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACvF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAsB;YAClC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC1C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAC1C,WAAW;YACX,OAAO;YACP,cAAc;YACd,KAAK,EAAE,IAAI,GAAG,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACzC,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YAChC,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW;YACX,OAAO;YACP,cAAc;SACf,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,UAAU,CAAC,UAAkB,EAAE,MAAc,EAAE,IAAa;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,IAAI,IAAI,IAAI,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kBAAkB,CAAC,UAAkB;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAE1D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,IAAI,SAAS,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACzD,IAAI,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,qBAAqB,CAAC,QAA4B,EAAE,YAAoB;QACtE,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACzF,CAAC;IAED,qBAAqB;QACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnD,IAAI,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/domain/value-objects/federation-budget.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Federation budget + hop counter (ADR-097 Phase 1).
+ *
+ * Carried in {@link FederationEnvelope} alongside the existing
+ * sourceNodeId/targetNodeId/payload. Sender supplies the original limits;
+ * each outbound hop increments hopCount and decrements remaining budget.
+ *
+ * Phase 1 enforces at the *send* side because there is no inbound
+ * dispatcher today (sendToNode is a stub — see researcher report).
+ * Phase 2 will move the decrement to receive once the inbound path lands.
+ *
+ * Security invariants pinned by the reviewer (audit_1776853149979 follow-up):
+ *
+ *   1. validateBudget rejects NaN, ±Infinity, negative numbers, and
+ *      non-integer hop counts. Returns a discriminated result so callers
+ *      cannot accidentally use a bad budget unchecked.
+ *   2. enforceBudget runs check-then-decrement in a single synchronous
+ *      function with no awaits inside — two concurrent send calls cannot
+ *      both pass the pre-check.
+ *   3. Errors return constant strings ("HOP_LIMIT_EXCEEDED" /
+ *      "BUDGET_EXCEEDED") with no remaining-budget echo so a caller can't
+ *      use the error response as an oracle for the threshold.
+ */
+/** Maximum hops a federation message may travel before the breaker opens. */
+export declare const DEFAULT_MAX_HOPS = 8;
+/**
+ * Caller-supplied budget. All fields are optional; omitted fields are
+ * treated as Infinity for the corresponding axis. Created via validateBudget;
+ * never construct directly.
+ */
+export interface Budget {
+    readonly maxHops: number;
+    readonly maxTokens: number;
+    readonly maxUsd: number;
+}
+/** Discriminated result of validating raw user input into a Budget. */
+export type BudgetValidationResult = {
+    ok: true;
+    budget: Budget;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Validate a raw budget object. Pure, no side effects. Caller obtains either
+ * a guaranteed-safe Budget or a structured error suitable for logging.
+ *
+ * Accepts undefined/null and returns a default unbounded budget (maxHops =
+ * DEFAULT_MAX_HOPS, tokens/usd = Infinity). This preserves backward
+ * compatibility for callers that don't pass a budget at all.
+ */
+export declare function validateBudget(raw: unknown, overrideMaxHops?: unknown): BudgetValidationResult;
+/**
+ * Enforcement decision returned by enforceBudget. Discriminated so the
+ * caller can map directly to a constant-string error — no remaining-budget
+ * echo on the failure side (anti-oracle).
+ */
+export type BudgetEnforcement = {
+    ok: true;
+    nextHopCount: number;
+    remaining: Budget;
+} | {
+    ok: false;
+    reason: 'HOP_LIMIT_EXCEEDED' | 'BUDGET_EXCEEDED';
+};
+/**
+ * Atomic (single synchronous function, no internal awaits) hop check.
+ *
+ * Returns the hopCount value the OUTBOUND envelope should carry plus the
+ * remaining budget that downstream peers will see. Callers must use the
+ * returned values; mutating the input Budget is forbidden (it's readonly).
+ *
+ * Contract:
+ *   - hopCount represents how many hops the message has already taken.
+ *   - The next outbound hop increments it: nextHopCount = hopCount + 1.
+ *   - The check fires AFTER increment: nextHopCount must be <= maxHops.
+ *   - This means maxHops=0 refuses to forward at all, which matches the
+ *     ADR's "no remote delegation allowed" semantic.
+ *
+ * tokensSpent / usdSpent are caller-reported actuals from the immediately
+ * preceding leg (or 0 on the originator). The check fires on the
+ * *post-spend* totals so a leg that overshoots is caught before the next
+ * outbound dispatch.
+ */
+export declare function enforceBudget(budget: Budget, hopCount: number, spent?: {
+    tokens: number;
+    usd: number;
+}): BudgetEnforcement;
+//# sourceMappingURL=federation-budget.d.ts.map

package/dist/domain/value-objects/federation-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-budget.d.ts","sourceRoot":"","sources":["../../../src/domain/value-objects/federation-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAQlC;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,eAAe,CAAC,EAAE,OAAO,GACxB,sBAAsB,CA6DxB;AAkCD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAA0B,GAC7D,iBAAiB,CAuBnB"}