@claude-flow/plugin-agent-federation 1.0.0-alpha.2

package/README.md

@@ -0,0 +1,45 @@
+# @claude-flow/plugin-agent-federation
+
+Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails.
+
+## Install + run
+
+```bash
+npx -y -p @claude-flow/plugin-agent-federation@latest ruflo-federation --help
+```
+
+## Subcommands
+
+| Command | Description |
+|---|---|
+| `ruflo-federation init` | Initialize federation on this node (generates keypair) |
+| `ruflo-federation join <peer-url>` | Join a federation by connecting to a peer |
+| `ruflo-federation leave` | Leave the current federation |
+| `ruflo-federation peers` | List known peers and their trust levels |
+| `ruflo-federation peers add <node-id>` | Add a peer to the federation |
+| `ruflo-federation peers remove <node-id>` | Remove a peer |
+| `ruflo-federation status` | Show federation health, sessions, trust levels |
+| `ruflo-federation audit` | Query compliance-grade audit logs |
+| `ruflo-federation trust` | Manage trust scores and tiers |
+| `ruflo-federation config` | Show/update federation config |
+
+## Configuration via `.env`
+
+```bash
+FEDERATION_NODE_NAME=my-node           # default: hostname
+FEDERATION_BIND_HOST=0.0.0.0           # default: 0.0.0.0
+FEDERATION_BIND_PORT=8443              # default: 8443
+FEDERATION_TRUST_LEVEL=untrusted       # default: untrusted
+```
+
+## Tests
+
+325 unit tests covering audit, routing, discovery, plugin lifecycle.
+
+```bash
+npm test
+```
+
+## License
+
+MIT — Claude Flow Team.

package/dist/application/federation-coordinator.d.ts

@@ -0,0 +1,51 @@
+import { FederationSession } from '../domain/entities/federation-session.js';
+import { type FederationMessageType } from '../domain/entities/federation-envelope.js';
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { DiscoveryService, type FederationManifest } from '../domain/services/discovery-service.js';
+import { HandshakeService } from '../domain/services/handshake-service.js';
+import { RoutingService, type RoutingResult } from '../domain/services/routing-service.js';
+import { AuditService } from '../domain/services/audit-service.js';
+import { PIIPipelineService } from '../domain/services/pii-pipeline-service.js';
+import { TrustEvaluator } from './trust-evaluator.js';
+import { PolicyEngine } from './policy-engine.js';
+export interface FederationCoordinatorConfig {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: readonly string[];
+}
+export interface FederationStatus {
+    readonly nodeId: string;
+    readonly activeSessions: number;
+    readonly knownPeers: number;
+    readonly trustLevels: Record<string, TrustLevel>;
+    readonly healthy: boolean;
+}
+export declare class FederationCoordinator {
+    private readonly config;
+    private readonly discovery;
+    private readonly handshake;
+    private readonly routing;
+    private readonly audit;
+    private readonly piiPipeline;
+    private readonly trustEvaluator;
+    private readonly policyEngine;
+    private readonly sessions;
+    private initialized;
+    constructor(config: FederationCoordinatorConfig, discovery: DiscoveryService, handshake: HandshakeService, routing: RoutingService, audit: AuditService, piiPipeline: PIIPipelineService, trustEvaluator: TrustEvaluator, policyEngine: PolicyEngine);
+    initialize(manifest: Omit<FederationManifest, 'signature'>): Promise<void>;
+    shutdown(): Promise<void>;
+    joinPeer(endpoint: string): Promise<FederationSession>;
+    leavePeer(nodeId: string): Promise<void>;
+    sendMessage<T>(targetNodeId: string, messageType: FederationMessageType, payload: T): Promise<RoutingResult>;
+    broadcastMessage<T>(messageType: FederationMessageType, payload: T): Promise<RoutingResult[]>;
+    handleThreatDetection(nodeId: string): void;
+    handleHmacFailure(nodeId: string): void;
+    getStatus(): FederationStatus;
+    getSession(sessionId: string): FederationSession | undefined;
+    getActiveSessions(): FederationSession[];
+    private establishSession;
+    private findSessionByNodeId;
+    private ensureInitialized;
+}
+//# sourceMappingURL=federation-coordinator.d.ts.map

package/dist/application/federation-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-coordinator.d.ts","sourceRoot":"","sources":["../../src/application/federation-coordinator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,cAAc,EAAiC,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,WAAW,CAAU;gBAG3B,MAAM,EAAE,2BAA2B,EACnC,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,kBAAkB,EAC/B,cAAc,EAAE,cAAc,EAC9B,YAAY,EAAE,YAAY;IActB,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1E,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAatD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxC,WAAW,CAAC,CAAC,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,CAAC;IAgDnB,gBAAgB,CAAC,CAAC,EACtB,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,CAAC,GACT,OAAO,CAAC,aAAa,EAAE,CAAC;IAK3B,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAqB3C,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAkBvC,SAAS,IAAI,gBAAgB;IAgB7B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI5D,iBAAiB,IAAI,iBAAiB,EAAE;YAI1B,gBAAgB;IAgC9B,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,iBAAiB;CAK1B"}

package/dist/application/federation-coordinator.js

@@ -0,0 +1,201 @@
+import { TrustLevel } from '../domain/entities/trust-level.js';
+export class FederationCoordinator {
+    config;
+    discovery;
+    handshake;
+    routing;
+    audit;
+    piiPipeline;
+    trustEvaluator;
+    policyEngine;
+    sessions;
+    initialized;
+    constructor(config, discovery, handshake, routing, audit, piiPipeline, trustEvaluator, policyEngine) {
+        this.config = config;
+        this.discovery = discovery;
+        this.handshake = handshake;
+        this.routing = routing;
+        this.audit = audit;
+        this.piiPipeline = piiPipeline;
+        this.trustEvaluator = trustEvaluator;
+        this.policyEngine = policyEngine;
+        this.sessions = new Map();
+        this.initialized = false;
+    }
+    async initialize(manifest) {
+        await this.discovery.publishManifest(manifest);
+        this.discovery.startPeriodicDiscovery();
+        this.initialized = true;
+        await this.audit.log('peer_manifest_published', {
+            metadata: { endpoint: this.config.endpoint },
+        });
+    }
+    async shutdown() {
+        this.discovery.stopPeriodicDiscovery();
+        for (const [sessionId, session] of this.sessions) {
+            session.terminate();
+            await this.audit.log('session_terminated', {
+                sessionId,
+                targetNodeId: session.remoteNodeId,
+            });
+        }
+        this.sessions.clear();
+        await this.audit.flush();
+        this.initialized = false;
+    }
+    async joinPeer(endpoint) {
+        this.ensureInitialized();
+        const node = await this.discovery.addStaticPeer(endpoint);
+        await this.audit.log('peer_discovered', {
+            targetNodeId: node.nodeId,
+            metadata: { endpoint },
+        });
+        return this.establishSession(node);
+    }
+    async leavePeer(nodeId) {
+        this.ensureInitialized();
+        const session = this.findSessionByNodeId(nodeId);
+        if (session) {
+            session.terminate();
+            this.sessions.delete(session.sessionId);
+            await this.audit.log('session_terminated', {
+                sessionId: session.sessionId,
+                targetNodeId: nodeId,
+            });
+        }
+        this.discovery.removePeer(nodeId);
+    }
+    async sendMessage(targetNodeId, messageType, payload) {
+        this.ensureInitialized();
+        const session = this.findSessionByNodeId(targetNodeId);
+        if (!session) {
+            return {
+                success: false,
+                mode: 'direct',
+                envelopeId: '',
+                targetNodeIds: [targetNodeId],
+                error: `No active session with node ${targetNodeId}`,
+            };
+        }
+        const policyResult = this.policyEngine.evaluateMessage(messageType, session.trustLevel, JSON.stringify(payload).length, this.config.nodeId);
+        if (!policyResult.allowed) {
+            await this.audit.log('message_rejected', {
+                targetNodeId,
+                sessionId: session.sessionId,
+                metadata: { reason: policyResult.reason },
+            });
+            return {
+                success: false,
+                mode: 'direct',
+                envelopeId: '',
+                targetNodeIds: [targetNodeId],
+                error: policyResult.reason,
+            };
+        }
+        const result = await this.routing.send(session, messageType, payload);
+        await this.audit.log(result.success ? 'message_sent' : 'message_rejected', {
+            targetNodeId,
+            sessionId: session.sessionId,
+            latencyMs: result.latencyMs,
+            metadata: { messageType, mode: result.mode },
+        });
+        return result;
+    }
+    async broadcastMessage(messageType, payload) {
+        this.ensureInitialized();
+        return this.routing.broadcast(messageType, payload);
+    }
+    handleThreatDetection(nodeId) {
+        const exceedsThreshold = this.trustEvaluator.recordThreatDetection(nodeId);
+        const node = this.discovery.getPeer(nodeId);
+        if (node && exceedsThreshold) {
+            this.trustEvaluator.downgrade(node, 'repeated-threat-detection');
+            const session = this.findSessionByNodeId(nodeId);
+            if (session) {
+                session.terminate();
+                this.sessions.delete(session.sessionId);
+            }
+            this.audit.log('threat_blocked', {
+                sourceNodeId: nodeId,
+                trustLevel: TrustLevel.UNTRUSTED,
+                threatDetected: true,
+                metadata: { reason: 'repeated-threat-detection' },
+            });
+        }
+    }
+    handleHmacFailure(nodeId) {
+        const node = this.discovery.getPeer(nodeId);
+        if (node) {
+            this.trustEvaluator.downgrade(node, 'hmac-verification-failure');
+            const session = this.findSessionByNodeId(nodeId);
+            if (session) {
+                session.terminate();
+                this.sessions.delete(session.sessionId);
+            }
+            this.audit.log('threat_blocked', {
+                sourceNodeId: nodeId,
+                trustLevel: TrustLevel.UNTRUSTED,
+                metadata: { reason: 'hmac-verification-failure' },
+            });
+        }
+    }
+    getStatus() {
+        const peers = this.discovery.listPeers();
+        const trustLevels = {};
+        for (const peer of peers) {
+            trustLevels[peer.nodeId] = peer.trustLevel;
+        }
+        return {
+            nodeId: this.config.nodeId,
+            activeSessions: Array.from(this.sessions.values()).filter(s => s.active).length,
+            knownPeers: peers.length,
+            trustLevels,
+            healthy: this.initialized,
+        };
+    }
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    getActiveSessions() {
+        return Array.from(this.sessions.values()).filter(s => s.active && !s.isExpired());
+    }
+    async establishSession(node) {
+        await this.audit.log('handshake_initiated', { targetNodeId: node.nodeId });
+        const challenge = await this.handshake.initiateHandshake(node);
+        const response = await this.handshake.respondToHandshake(challenge);
+        const result = await this.handshake.verifyChallenge(response, node);
+        if (!result.success || !result.session) {
+            await this.audit.log('handshake_failed', {
+                targetNodeId: node.nodeId,
+                metadata: { error: result.error },
+            });
+            throw new Error(`Handshake failed: ${result.error}`);
+        }
+        this.sessions.set(result.session.sessionId, result.session);
+        await this.audit.log('handshake_completed', {
+            targetNodeId: node.nodeId,
+            sessionId: result.session.sessionId,
+            trustLevel: result.session.trustLevel,
+        });
+        await this.audit.log('session_created', {
+            sessionId: result.session.sessionId,
+            targetNodeId: node.nodeId,
+            trustLevel: result.session.trustLevel,
+        });
+        return result.session;
+    }
+    findSessionByNodeId(nodeId) {
+        for (const session of this.sessions.values()) {
+            if (session.remoteNodeId === nodeId && session.active) {
+                return session;
+            }
+        }
+        return undefined;
+    }
+    ensureInitialized() {
+        if (!this.initialized) {
+            throw new Error('FederationCoordinator is not initialized. Call initialize() first.');
+        }
+    }
+}
+//# sourceMappingURL=federation-coordinator.js.map

package/dist/application/federation-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-coordinator.js","sourceRoot":"","sources":["../../src/application/federation-coordinator.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAwB/D,MAAM,OAAO,qBAAqB;IACf,MAAM,CAA8B;IACpC,SAAS,CAAmB;IAC5B,SAAS,CAAmB;IAC5B,OAAO,CAAiB;IACxB,KAAK,CAAe;IACpB,WAAW,CAAqB;IAChC,cAAc,CAAiB;IAC/B,YAAY,CAAe;IAC3B,QAAQ,CAAiC;IAClD,WAAW,CAAU;IAE7B,YACE,MAAmC,EACnC,SAA2B,EAC3B,SAA2B,EAC3B,OAAuB,EACvB,KAAmB,EACnB,WAA+B,EAC/B,cAA8B,EAC9B,YAA0B;QAE1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA+C;QAC9D,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAExB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE;YAC9C,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC;QAEvC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE;gBACzC,SAAS;gBACT,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE1D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE;YACtC,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,QAAQ,EAAE,EAAE,QAAQ,EAAE;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAExC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE;gBACzC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,WAAW,CACf,YAAoB,EACpB,WAAkC,EAClC,OAAU;QAEV,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,aAAa,EAAE,CAAC,YAAY,CAAC;gBAC7B,KAAK,EAAE,+BAA+B,YAAY,EAAE;aACrD,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CACpD,WAAW,EACX,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,EAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvC,YAAY;gBACZ,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,aAAa,EAAE,CAAC,YAAY,CAAC;gBAC7B,KAAK,EAAE,YAAY,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEtE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAAE;YACzE,YAAY;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;SAC7C,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,WAAkC,EAClC,OAAU;QAEV,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,qBAAqB,CAAC,MAAc;QAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE5C,IAAI,IAAI,IAAI,gBAAgB,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBAC/B,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,UAAU,CAAC,SAAS;gBAChC,cAAc,EAAE,IAAI;gBACpB,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,MAAc;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBAC/B,YAAY,EAAE,MAAM;gBACpB,UAAU,EAAE,UAAU,CAAC,SAAS;gBAChC,QAAQ,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS;QACP,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,WAAW,GAA+B,EAAE,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;YAC/E,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,WAAW;YACX,OAAO,EAAE,IAAI,CAAC,WAAW;SAC1B,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,iBAAiB;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAoB;QACjD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEpE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBACvC,YAAY,EAAE,IAAI,CAAC,MAAM;gBACzB,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;aAClC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,EAAE;YAC1C,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;SACtC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE;YACtC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;SACtC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,mBAAmB,CAAC,MAAc;QACxC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACtD,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;CACF"}

package/dist/application/policy-engine.d.ts

@@ -0,0 +1,41 @@
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { type PIIAction, type PIIDetection, type PIIPolicyConfig } from '../domain/services/pii-pipeline-service.js';
+import { type FederationMessageType } from '../domain/entities/federation-envelope.js';
+export type FederationClaimType = 'federation:discover' | 'federation:connect' | 'federation:read' | 'federation:write' | 'federation:admin' | 'federation:memory' | 'federation:spawn';
+export interface SecurityPolicy {
+    readonly maxMessageSizeBytes: number;
+    readonly maxMessagesPerMinute: number;
+    readonly allowedMessageTypes: readonly FederationMessageType[];
+    readonly requirePiiScan: boolean;
+    readonly requireAiDefenceScan: boolean;
+    readonly minTrustLevelForWrite: TrustLevel;
+    readonly minTrustLevelForMemory: TrustLevel;
+    readonly minTrustLevelForSpawn: TrustLevel;
+}
+export interface PolicyEvaluationResult {
+    readonly allowed: boolean;
+    readonly reason: string;
+    readonly requiredClaims: readonly FederationClaimType[];
+    readonly trustLevelSufficient: boolean;
+    readonly piiAction?: PIIAction;
+}
+export interface PolicyEngineDeps {
+    checkClaim: (claim: FederationClaimType) => boolean;
+}
+export declare class PolicyEngine {
+    private readonly deps;
+    private readonly securityPolicy;
+    private readonly piiPolicy;
+    private readonly rateLimitCounters;
+    constructor(deps: PolicyEngineDeps, securityPolicy?: Partial<SecurityPolicy>, piiPolicy?: PIIPolicyConfig);
+    evaluateMessage(messageType: FederationMessageType, trustLevel: TrustLevel, messageSizeBytes: number, sourceNodeId: string): PolicyEvaluationResult;
+    evaluatePiiDetection(detection: PIIDetection, trustLevel: TrustLevel): PIIAction;
+    evaluateTrustChange(currentLevel: TrustLevel, proposedLevel: TrustLevel): {
+        allowed: boolean;
+        requiresHumanApproval: boolean;
+        reason: string;
+    };
+    private checkRateLimit;
+    private getOperationForMessageType;
+}
+//# sourceMappingURL=policy-engine.d.ts.map

package/dist/application/policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.d.ts","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,KAAK,SAAS,EAAgB,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,4CAA4C,CAAC;AACnI,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAEvF,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC/D,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;CAChC;AAmCD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC;CACrD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAsD;gBAGtF,IAAI,EAAE,gBAAgB,EACtB,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EACxC,SAAS,CAAC,EAAE,eAAe;IAc7B,eAAe,CACb,WAAW,EAAE,qBAAqB,EAClC,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,sBAAsB;IAyDzB,oBAAoB,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS;IAWhF,mBAAmB,CACjB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,UAAU,GACxB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAgCvE,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,0BAA0B;CAyBnC"}

package/dist/application/policy-engine.js

@@ -0,0 +1,175 @@
+import { TrustLevel, isOperationAllowed } from '../domain/entities/trust-level.js';
+const DEFAULT_SECURITY_POLICY = {
+    maxMessageSizeBytes: 1_048_576,
+    maxMessagesPerMinute: 120,
+    allowedMessageTypes: [
+        'task-assignment', 'memory-query', 'memory-response',
+        'context-share', 'status-broadcast', 'heartbeat',
+        'trust-change', 'topology-change', 'agent-spawn',
+    ],
+    requirePiiScan: true,
+    requireAiDefenceScan: true,
+    minTrustLevelForWrite: TrustLevel.ATTESTED,
+    minTrustLevelForMemory: TrustLevel.TRUSTED,
+    minTrustLevelForSpawn: TrustLevel.PRIVILEGED,
+};
+const CLAIMS_FOR_MESSAGE_TYPE = {
+    'task-assignment': ['federation:write'],
+    'memory-query': ['federation:read', 'federation:memory'],
+    'memory-response': ['federation:read', 'federation:memory'],
+    'context-share': ['federation:write'],
+    'status-broadcast': ['federation:read'],
+    'trust-change': ['federation:admin'],
+    'topology-change': ['federation:admin'],
+    'agent-spawn': ['federation:spawn'],
+    'heartbeat': ['federation:connect'],
+    'challenge': ['federation:connect'],
+    'challenge-response': ['federation:connect'],
+    'handshake-init': ['federation:connect'],
+    'handshake-accept': ['federation:connect'],
+    'handshake-reject': ['federation:connect'],
+    'session-terminate': ['federation:connect'],
+};
+export class PolicyEngine {
+    deps;
+    securityPolicy;
+    piiPolicy;
+    rateLimitCounters;
+    constructor(deps, securityPolicy, piiPolicy) {
+        this.deps = deps;
+        this.securityPolicy = { ...DEFAULT_SECURITY_POLICY, ...securityPolicy };
+        this.piiPolicy = piiPolicy ?? {
+            defaultAction: 'redact',
+            overrides: {},
+            hashAlgorithm: 'sha256',
+            hashSalt: '',
+            redactionPlaceholder: '[REDACTED:{type}]',
+        };
+        this.rateLimitCounters = new Map();
+    }
+    evaluateMessage(messageType, trustLevel, messageSizeBytes, sourceNodeId) {
+        if (!this.securityPolicy.allowedMessageTypes.includes(messageType)) {
+            return {
+                allowed: false,
+                reason: `Message type '${messageType}' is not allowed by security policy`,
+                requiredClaims: [],
+                trustLevelSufficient: false,
+            };
+        }
+        if (messageSizeBytes > this.securityPolicy.maxMessageSizeBytes) {
+            return {
+                allowed: false,
+                reason: `Message size ${messageSizeBytes} exceeds maximum ${this.securityPolicy.maxMessageSizeBytes}`,
+                requiredClaims: [],
+                trustLevelSufficient: true,
+            };
+        }
+        if (!this.checkRateLimit(sourceNodeId)) {
+            return {
+                allowed: false,
+                reason: `Rate limit exceeded for node ${sourceNodeId}`,
+                requiredClaims: [],
+                trustLevelSufficient: true,
+            };
+        }
+        const requiredClaims = CLAIMS_FOR_MESSAGE_TYPE[messageType] ?? [];
+        const missingClaims = requiredClaims.filter(c => !this.deps.checkClaim(c));
+        if (missingClaims.length > 0) {
+            return {
+                allowed: false,
+                reason: `Missing required claims: ${missingClaims.join(', ')}`,
+                requiredClaims,
+                trustLevelSufficient: true,
+            };
+        }
+        const operationForType = this.getOperationForMessageType(messageType);
+        if (!isOperationAllowed(trustLevel, operationForType)) {
+            return {
+                allowed: false,
+                reason: `Trust level ${trustLevel} insufficient for operation '${operationForType}'`,
+                requiredClaims,
+                trustLevelSufficient: false,
+            };
+        }
+        return {
+            allowed: true,
+            reason: 'Policy check passed',
+            requiredClaims,
+            trustLevelSufficient: true,
+        };
+    }
+    evaluatePiiDetection(detection, trustLevel) {
+        const override = this.piiPolicy.overrides[detection.type];
+        if (override?.trustLevelOverride?.[trustLevel]) {
+            return override.trustLevelOverride[trustLevel];
+        }
+        if (override?.action) {
+            return override.action;
+        }
+        return this.piiPolicy.defaultAction;
+    }
+    evaluateTrustChange(currentLevel, proposedLevel) {
+        if (proposedLevel > currentLevel && proposedLevel === TrustLevel.PRIVILEGED) {
+            return {
+                allowed: true,
+                requiresHumanApproval: true,
+                reason: 'Elevation to PRIVILEGED requires institutional attestation and human approval',
+            };
+        }
+        if (proposedLevel > currentLevel) {
+            return {
+                allowed: true,
+                requiresHumanApproval: false,
+                reason: `Trust upgrade from ${currentLevel} to ${proposedLevel} allowed`,
+            };
+        }
+        if (proposedLevel < currentLevel) {
+            return {
+                allowed: true,
+                requiresHumanApproval: false,
+                reason: `Trust downgrade from ${currentLevel} to ${proposedLevel} allowed`,
+            };
+        }
+        return {
+            allowed: false,
+            requiresHumanApproval: false,
+            reason: 'No trust level change',
+        };
+    }
+    checkRateLimit(nodeId) {
+        const now = Date.now();
+        const counter = this.rateLimitCounters.get(nodeId);
+        if (!counter || now - counter.windowStart > 60_000) {
+            this.rateLimitCounters.set(nodeId, { count: 1, windowStart: now });
+            return true;
+        }
+        counter.count++;
+        return counter.count <= this.securityPolicy.maxMessagesPerMinute;
+    }
+    getOperationForMessageType(messageType) {
+        switch (messageType) {
+            case 'memory-query':
+            case 'memory-response':
+                return 'query-redacted';
+            case 'context-share':
+                return 'share-context';
+            case 'task-assignment':
+                return 'send';
+            case 'agent-spawn':
+                return 'remote-spawn';
+            case 'status-broadcast':
+                return 'status';
+            case 'heartbeat':
+            case 'challenge':
+            case 'challenge-response':
+            case 'handshake-init':
+            case 'handshake-accept':
+            case 'handshake-reject':
+            case 'session-terminate':
+                return 'ping';
+            default:
+                return 'send';
+        }
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/application/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/application/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAgCnF,MAAM,uBAAuB,GAAmB;IAC9C,mBAAmB,EAAE,SAAS;IAC9B,oBAAoB,EAAE,GAAG;IACzB,mBAAmB,EAAE;QACnB,iBAAiB,EAAE,cAAc,EAAE,iBAAiB;QACpD,eAAe,EAAE,kBAAkB,EAAE,WAAW;QAChD,cAAc,EAAE,iBAAiB,EAAE,aAAa;KACjD;IACD,cAAc,EAAE,IAAI;IACpB,oBAAoB,EAAE,IAAI;IAC1B,qBAAqB,EAAE,UAAU,CAAC,QAAQ;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO;IAC1C,qBAAqB,EAAE,UAAU,CAAC,UAAU;CAC7C,CAAC;AAEF,MAAM,uBAAuB,GAAyD;IACpF,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,cAAc,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACxD,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAC3D,eAAe,EAAE,CAAC,kBAAkB,CAAC;IACrC,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,cAAc,EAAE,CAAC,kBAAkB,CAAC;IACpC,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;IACvC,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,WAAW,EAAE,CAAC,oBAAoB,CAAC;IACnC,oBAAoB,EAAE,CAAC,oBAAoB,CAAC;IAC5C,gBAAgB,EAAE,CAAC,oBAAoB,CAAC;IACxC,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,kBAAkB,EAAE,CAAC,oBAAoB,CAAC;IAC1C,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;CAC5C,CAAC;AAMF,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,cAAc,CAAiB;IAC/B,SAAS,CAAkB;IAC3B,iBAAiB,CAAsD;IAExF,YACE,IAAsB,EACtB,cAAwC,EACxC,SAA2B;QAE3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAAc,EAAE,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI;YAC5B,aAAa,EAAE,QAAQ;YACvB,SAAS,EAAE,EAAE;YACb,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,mBAAmB;SAC1C,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;IACrC,CAAC;IAED,eAAe,CACb,WAAkC,EAClC,UAAsB,EACtB,gBAAwB,EACxB,YAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB,WAAW,qCAAqC;gBACzE,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gBAAgB,gBAAgB,oBAAoB,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE;gBACrG,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,gCAAgC,YAAY,EAAE;gBACtD,cAAc,EAAE,EAAE;gBAClB,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9D,cAAc;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,eAAe,UAAU,gCAAgC,gBAAgB,GAAG;gBACpF,cAAc;gBACd,oBAAoB,EAAE,KAAK;aAC5B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,qBAAqB;YAC7B,cAAc;YACd,oBAAoB,EAAE,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,SAAuB,EAAE,UAAsB;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC,kBAAkB,CAAC,UAAU,CAAE,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IACtC,CAAC;IAED,mBAAmB,CACjB,YAAwB,EACxB,aAAyB;QAEzB,IAAI,aAAa,GAAG,YAAY,IAAI,aAAa,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,IAAI;gBAC3B,MAAM,EAAE,+EAA+E;aACxF,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,sBAAsB,YAAY,OAAO,aAAa,UAAU;aACzE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,qBAAqB,EAAE,KAAK;gBAC5B,MAAM,EAAE,wBAAwB,YAAY,OAAO,aAAa,UAAU;aAC3E,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,qBAAqB,EAAE,KAAK;YAC5B,MAAM,EAAE,uBAAuB;SAChC,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC;IACnE,CAAC;IAEO,0BAA0B,CAAC,WAAkC;QACnE,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,cAAc,CAAC;YACpB,KAAK,iBAAiB;gBACpB,OAAO,gBAAgB,CAAC;YAC1B,KAAK,eAAe;gBAClB,OAAO,eAAe,CAAC;YACzB,KAAK,iBAAiB;gBACpB,OAAO,MAAM,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO,cAAc,CAAC;YACxB,KAAK,kBAAkB;gBACrB,OAAO,QAAQ,CAAC;YAClB,KAAK,WAAW,CAAC;YACjB,KAAK,WAAW,CAAC;YACjB,KAAK,oBAAoB,CAAC;YAC1B,KAAK,gBAAgB,CAAC;YACtB,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB,CAAC;YACxB,KAAK,mBAAmB;gBACtB,OAAO,MAAM,CAAC;YAChB;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/application/trust-evaluator.d.ts

@@ -0,0 +1,42 @@
+import { TrustLevel } from '../domain/entities/trust-level.js';
+import { FederationNode } from '../domain/entities/federation-node.js';
+import { type SessionMetrics } from '../domain/entities/federation-session.js';
+export interface TrustScoreComponents {
+    readonly successRate: number;
+    readonly uptime: number;
+    readonly threatPenalty: number;
+    readonly dataIntegrityScore: number;
+}
+export interface TrustTransitionResult {
+    readonly previousLevel: TrustLevel;
+    readonly newLevel: TrustLevel;
+    readonly score: number;
+    readonly components: TrustScoreComponents;
+    readonly reason: string;
+    readonly requiresHumanApproval: boolean;
+}
+export type ImmediateDowngradeReason = 'repeated-threat-detection' | 'hmac-verification-failure' | 'session-hijack-attempt';
+export interface TrustEvaluatorDeps {
+    onTrustChange?: (nodeId: string, result: TrustTransitionResult) => void;
+}
+export interface ThreatWindow {
+    readonly detections: Date[];
+    readonly windowMs: number;
+    readonly threshold: number;
+}
+export declare class TrustEvaluator {
+    private readonly deps;
+    private readonly threatWindows;
+    constructor(deps?: TrustEvaluatorDeps);
+    computeScore(metrics: SessionMetrics, uptimeRatio: number): {
+        score: number;
+        components: TrustScoreComponents;
+    };
+    evaluateTransition(node: FederationNode, metrics: SessionMetrics, uptimeRatio: number, hasInstitutionalAttestation?: boolean): TrustTransitionResult | null;
+    downgrade(node: FederationNode, reason: ImmediateDowngradeReason): TrustTransitionResult;
+    recordThreatDetection(nodeId: string): boolean;
+    private checkUpgrade;
+    private checkDowngrade;
+    private computeThreatPenalty;
+}
+//# sourceMappingURL=trust-evaluator.d.ts.map

package/dist/application/trust-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-evaluator.d.ts","sourceRoot":"","sources":["../../src/application/trust-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAA+B,MAAM,mCAAmC,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAE/E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,MAAM,wBAAwB,GAChC,2BAA2B,GAC3B,2BAA2B,GAC3B,wBAAwB,CAAC;AAE7B,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAQD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;gBAExC,IAAI,GAAE,kBAAuB;IAKzC,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,oBAAoB,CAAA;KAAE;IA8B/G,kBAAkB,CAChB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,EACvB,WAAW,EAAE,MAAM,EACnB,2BAA2B,GAAE,OAAe,GAC3C,qBAAqB,GAAG,IAAI;IA4C/B,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,wBAAwB,GAAG,qBAAqB;IAmBxF,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAY9C,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,oBAAoB;CAK7B"}