@claude-flow/plugin-agent-federation 1.0.0-alpha.2

package/dist/domain/entities/federation-envelope.js

@@ -0,0 +1,68 @@
+export class FederationEnvelope {
+    envelopeId;
+    sourceNodeId;
+    targetNodeId;
+    sessionId;
+    messageType;
+    payload;
+    timestamp;
+    nonce;
+    hmacSignature;
+    piiScanResult;
+    constructor(props) {
+        this.envelopeId = props.envelopeId;
+        this.sourceNodeId = props.sourceNodeId;
+        this.targetNodeId = props.targetNodeId;
+        this.sessionId = props.sessionId;
+        this.messageType = props.messageType;
+        this.payload = props.payload;
+        this.timestamp = props.timestamp;
+        this.nonce = props.nonce;
+        this.hmacSignature = props.hmacSignature;
+        this.piiScanResult = props.piiScanResult;
+    }
+    isExpired(maxAgeMs) {
+        return Date.now() - this.timestamp.getTime() > maxAgeMs;
+    }
+    toJSON() {
+        return {
+            envelopeId: this.envelopeId,
+            sourceNodeId: this.sourceNodeId,
+            targetNodeId: this.targetNodeId,
+            sessionId: this.sessionId,
+            messageType: this.messageType,
+            payload: this.payload,
+            timestamp: this.timestamp.toISOString(),
+            nonce: this.nonce,
+            hmacSignature: this.hmacSignature,
+            piiScanResult: this.piiScanResult,
+        };
+    }
+    toSignablePayload() {
+        return JSON.stringify({
+            envelopeId: this.envelopeId,
+            sourceNodeId: this.sourceNodeId,
+            targetNodeId: this.targetNodeId,
+            sessionId: this.sessionId,
+            messageType: this.messageType,
+            payload: this.payload,
+            timestamp: this.timestamp.toISOString(),
+            nonce: this.nonce,
+        });
+    }
+    static emptyScanResult() {
+        return {
+            scanned: false,
+            piiFound: false,
+            detections: [],
+            actionsApplied: [],
+            scanDurationMs: 0,
+        };
+    }
+}
+export const CONSENSUS_REQUIRED_TYPES = new Set([
+    'trust-change',
+    'topology-change',
+    'agent-spawn',
+]);
+//# sourceMappingURL=federation-envelope.js.map

package/dist/domain/entities/federation-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-envelope.js","sourceRoot":"","sources":["../../../src/domain/entities/federation-envelope.ts"],"names":[],"mappings":"AA8CA,MAAM,OAAO,kBAAkB;IACpB,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,YAAY,CAAS;IACrB,SAAS,CAAS;IAClB,WAAW,CAAwB;IACnC,OAAO,CAAI;IACX,SAAS,CAAO;IAChB,KAAK,CAAS;IACd,aAAa,CAAS;IACtB,aAAa,CAAgB;IAEtC,YAAY,KAAiC;QAC3C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC3C,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC1D,CAAC;IAED,MAAM;QACJ,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC;IACJ,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;YACvC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,eAAe;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAuC,IAAI,GAAG,CAAC;IAClF,cAAc;IACd,iBAAiB;IACjB,aAAa;CACd,CAAC,CAAC"}

package/dist/domain/entities/federation-node.d.ts

@@ -0,0 +1,49 @@
+import { TrustLevel } from './trust-level.js';
+export interface FederationNodeCapabilities {
+    readonly agentTypes: readonly string[];
+    readonly maxConcurrentSessions: number;
+    readonly supportedProtocols: readonly string[];
+    readonly complianceModes: readonly string[];
+}
+export interface FederationNodeMetadata {
+    readonly organizationId?: string;
+    readonly region?: string;
+    readonly version?: string;
+    readonly [key: string]: unknown;
+}
+export interface FederationNodeProps {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: FederationNodeCapabilities;
+    readonly trustLevel: TrustLevel;
+    readonly trustScore: number;
+    readonly lastSeen: Date;
+    readonly metadata: FederationNodeMetadata;
+}
+export declare class FederationNode {
+    readonly nodeId: string;
+    readonly publicKey: string;
+    readonly endpoint: string;
+    readonly capabilities: FederationNodeCapabilities;
+    private _trustLevel;
+    private _trustScore;
+    private _lastSeen;
+    private readonly _metadata;
+    constructor(props: FederationNodeProps);
+    get trustLevel(): TrustLevel;
+    get trustScore(): number;
+    get lastSeen(): Date;
+    get metadata(): FederationNodeMetadata;
+    updateTrustLevel(level: TrustLevel): void;
+    updateTrustScore(score: number): void;
+    markSeen(): void;
+    isStale(maxAgeMs: number): boolean;
+    toProps(): FederationNodeProps;
+    static create(props: Omit<FederationNodeProps, 'trustLevel' | 'trustScore' | 'lastSeen'> & {
+        trustLevel?: TrustLevel;
+        trustScore?: number;
+        lastSeen?: Date;
+    }): FederationNode;
+}
+//# sourceMappingURL=federation-node.d.ts.map

package/dist/domain/entities/federation-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-node.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/federation-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC;IAElD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;gBAEvC,KAAK,EAAE,mBAAmB;IAWtC,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,QAAQ,IAAI,IAAI,CAEnB;IAED,IAAI,QAAQ,IAAI,sBAAsB,CAErC;IAED,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAIzC,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrC,QAAQ,IAAI,IAAI;IAIhB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlC,OAAO,IAAI,mBAAmB;IAa9B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC,GAAG;QACzF,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,IAAI,CAAC;KACjB,GAAG,cAAc;CAQnB"}

package/dist/domain/entities/federation-node.js

@@ -0,0 +1,66 @@
+import { TrustLevel } from './trust-level.js';
+export class FederationNode {
+    nodeId;
+    publicKey;
+    endpoint;
+    capabilities;
+    _trustLevel;
+    _trustScore;
+    _lastSeen;
+    _metadata;
+    constructor(props) {
+        this.nodeId = props.nodeId;
+        this.publicKey = props.publicKey;
+        this.endpoint = props.endpoint;
+        this.capabilities = props.capabilities;
+        this._trustLevel = props.trustLevel;
+        this._trustScore = props.trustScore;
+        this._lastSeen = props.lastSeen;
+        this._metadata = props.metadata;
+    }
+    get trustLevel() {
+        return this._trustLevel;
+    }
+    get trustScore() {
+        return this._trustScore;
+    }
+    get lastSeen() {
+        return this._lastSeen;
+    }
+    get metadata() {
+        return this._metadata;
+    }
+    updateTrustLevel(level) {
+        this._trustLevel = level;
+    }
+    updateTrustScore(score) {
+        this._trustScore = Math.max(0, Math.min(1, score));
+    }
+    markSeen() {
+        this._lastSeen = new Date();
+    }
+    isStale(maxAgeMs) {
+        return Date.now() - this._lastSeen.getTime() > maxAgeMs;
+    }
+    toProps() {
+        return {
+            nodeId: this.nodeId,
+            publicKey: this.publicKey,
+            endpoint: this.endpoint,
+            capabilities: this.capabilities,
+            trustLevel: this._trustLevel,
+            trustScore: this._trustScore,
+            lastSeen: this._lastSeen,
+            metadata: this._metadata,
+        };
+    }
+    static create(props) {
+        return new FederationNode({
+            ...props,
+            trustLevel: props.trustLevel ?? TrustLevel.UNTRUSTED,
+            trustScore: props.trustScore ?? 0,
+            lastSeen: props.lastSeen ?? new Date(),
+        });
+    }
+}
+//# sourceMappingURL=federation-node.js.map

package/dist/domain/entities/federation-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-node.js","sourceRoot":"","sources":["../../../src/domain/entities/federation-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AA2B9C,MAAM,OAAO,cAAc;IAChB,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,YAAY,CAA6B;IAE1C,WAAW,CAAa;IACxB,WAAW,CAAS;IACpB,SAAS,CAAO;IACP,SAAS,CAAyB;IAEnD,YAAY,KAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,gBAAgB,CAAC,KAAiB;QAChC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAIb;QACC,OAAO,IAAI,cAAc,CAAC;YACxB,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS;YACpD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/domain/entities/federation-session.d.ts

@@ -0,0 +1,55 @@
+import { TrustLevel } from './trust-level.js';
+export interface SessionMetrics {
+    messagesSent: number;
+    messagesReceived: number;
+    piiRedactions: number;
+    threatDetections: number;
+    hmacFailures: number;
+    totalInteractions: number;
+}
+export interface FederationSessionProps {
+    readonly sessionId: string;
+    readonly localNodeId: string;
+    readonly remoteNodeId: string;
+    readonly trustLevel: TrustLevel;
+    readonly negotiatedCapabilities: readonly string[];
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+    readonly heartbeatInterval: number;
+    readonly sessionToken: string;
+    readonly metrics: SessionMetrics;
+}
+export declare class FederationSession {
+    readonly sessionId: string;
+    readonly localNodeId: string;
+    readonly remoteNodeId: string;
+    readonly negotiatedCapabilities: readonly string[];
+    readonly createdAt: Date;
+    readonly heartbeatInterval: number;
+    readonly sessionToken: string;
+    private _trustLevel;
+    private _expiresAt;
+    private _lastHeartbeat;
+    private _metrics;
+    private _active;
+    constructor(props: FederationSessionProps);
+    get trustLevel(): TrustLevel;
+    get expiresAt(): Date;
+    get lastHeartbeat(): Date;
+    get metrics(): Readonly<SessionMetrics>;
+    get active(): boolean;
+    isExpired(): boolean;
+    isHeartbeatOverdue(): boolean;
+    recordHeartbeat(): void;
+    renew(newExpiresAt: Date): void;
+    updateTrustLevel(level: TrustLevel): void;
+    recordMessageSent(): void;
+    recordMessageReceived(): void;
+    recordPiiRedaction(): void;
+    recordThreatDetection(): void;
+    recordHmacFailure(): void;
+    terminate(): void;
+    toProps(): FederationSessionProps;
+    static createMetrics(): SessionMetrics;
+}
+//# sourceMappingURL=federation-session.d.ts.map

package/dist/domain/entities/federation-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-session.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/federation-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,UAAU,CAAO;IACzB,OAAO,CAAC,cAAc,CAAO;IAC7B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,OAAO,CAAU;gBAEb,KAAK,EAAE,sBAAsB;IAezC,IAAI,UAAU,IAAI,UAAU,CAE3B;IAED,IAAI,SAAS,IAAI,IAAI,CAEpB;IAED,IAAI,aAAa,IAAI,IAAI,CAExB;IAED,IAAI,OAAO,IAAI,QAAQ,CAAC,cAAc,CAAC,CAEtC;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,OAAO;IAK7B,eAAe,IAAI,IAAI;IAIvB,KAAK,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI;IAK/B,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAIzC,iBAAiB,IAAI,IAAI;IAKzB,qBAAqB,IAAI,IAAI;IAK7B,kBAAkB,IAAI,IAAI;IAI1B,qBAAqB,IAAI,IAAI;IAI7B,iBAAiB,IAAI,IAAI;IAIzB,SAAS,IAAI,IAAI;IAIjB,OAAO,IAAI,sBAAsB;IAejC,MAAM,CAAC,aAAa,IAAI,cAAc;CAUvC"}

package/dist/domain/entities/federation-session.js

@@ -0,0 +1,105 @@
+export class FederationSession {
+    sessionId;
+    localNodeId;
+    remoteNodeId;
+    negotiatedCapabilities;
+    createdAt;
+    heartbeatInterval;
+    sessionToken;
+    _trustLevel;
+    _expiresAt;
+    _lastHeartbeat;
+    _metrics;
+    _active;
+    constructor(props) {
+        this.sessionId = props.sessionId;
+        this.localNodeId = props.localNodeId;
+        this.remoteNodeId = props.remoteNodeId;
+        this._trustLevel = props.trustLevel;
+        this.negotiatedCapabilities = props.negotiatedCapabilities;
+        this.createdAt = props.createdAt;
+        this._expiresAt = props.expiresAt;
+        this.heartbeatInterval = props.heartbeatInterval;
+        this.sessionToken = props.sessionToken;
+        this._metrics = { ...props.metrics };
+        this._lastHeartbeat = new Date();
+        this._active = true;
+    }
+    get trustLevel() {
+        return this._trustLevel;
+    }
+    get expiresAt() {
+        return this._expiresAt;
+    }
+    get lastHeartbeat() {
+        return this._lastHeartbeat;
+    }
+    get metrics() {
+        return this._metrics;
+    }
+    get active() {
+        return this._active;
+    }
+    isExpired() {
+        return Date.now() >= this._expiresAt.getTime();
+    }
+    isHeartbeatOverdue() {
+        const overdueThreshold = this.heartbeatInterval * 3;
+        return Date.now() - this._lastHeartbeat.getTime() > overdueThreshold;
+    }
+    recordHeartbeat() {
+        this._lastHeartbeat = new Date();
+    }
+    renew(newExpiresAt) {
+        this._expiresAt = newExpiresAt;
+        this._lastHeartbeat = new Date();
+    }
+    updateTrustLevel(level) {
+        this._trustLevel = level;
+    }
+    recordMessageSent() {
+        this._metrics.messagesSent++;
+        this._metrics.totalInteractions++;
+    }
+    recordMessageReceived() {
+        this._metrics.messagesReceived++;
+        this._metrics.totalInteractions++;
+    }
+    recordPiiRedaction() {
+        this._metrics.piiRedactions++;
+    }
+    recordThreatDetection() {
+        this._metrics.threatDetections++;
+    }
+    recordHmacFailure() {
+        this._metrics.hmacFailures++;
+    }
+    terminate() {
+        this._active = false;
+    }
+    toProps() {
+        return {
+            sessionId: this.sessionId,
+            localNodeId: this.localNodeId,
+            remoteNodeId: this.remoteNodeId,
+            trustLevel: this._trustLevel,
+            negotiatedCapabilities: this.negotiatedCapabilities,
+            createdAt: this.createdAt,
+            expiresAt: this._expiresAt,
+            heartbeatInterval: this.heartbeatInterval,
+            sessionToken: this.sessionToken,
+            metrics: { ...this._metrics },
+        };
+    }
+    static createMetrics() {
+        return {
+            messagesSent: 0,
+            messagesReceived: 0,
+            piiRedactions: 0,
+            threatDetections: 0,
+            hmacFailures: 0,
+            totalInteractions: 0,
+        };
+    }
+}
+//# sourceMappingURL=federation-session.js.map

package/dist/domain/entities/federation-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-session.js","sourceRoot":"","sources":["../../../src/domain/entities/federation-session.ts"],"names":[],"mappings":"AAwBA,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,sBAAsB,CAAoB;IAC1C,SAAS,CAAO;IAChB,iBAAiB,CAAS;IAC1B,YAAY,CAAS;IAEtB,WAAW,CAAa;IACxB,UAAU,CAAO;IACjB,cAAc,CAAO;IACrB,QAAQ,CAAiB;IACzB,OAAO,CAAU;IAEzB,YAAY,KAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,kBAAkB;QAChB,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC;IACvE,CAAC;IAED,eAAe;QACb,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,YAAkB;QACtB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gBAAgB,CAAC,KAAiB;QAChC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACpC,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACpC,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAChC,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IACnC,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC/B,CAAC;IAED,SAAS;QACP,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,OAAO;QACL,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO;YACL,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,CAAC;YAChB,gBAAgB,EAAE,CAAC;YACnB,YAAY,EAAE,CAAC;YACf,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;CACF"}

package/dist/domain/entities/trust-level.d.ts

@@ -0,0 +1,17 @@
+export declare enum TrustLevel {
+    UNTRUSTED = 0,
+    VERIFIED = 1,
+    ATTESTED = 2,
+    TRUSTED = 3,
+    PRIVILEGED = 4
+}
+export interface TrustTransitionThreshold {
+    upgradeScore: number;
+    downgradeScore: number;
+    minInteractions: number;
+}
+export declare const TRUST_TRANSITION_THRESHOLDS: Record<string, TrustTransitionThreshold>;
+export declare const CAPABILITY_GATES: Record<TrustLevel, readonly string[]>;
+export declare function isOperationAllowed(trustLevel: TrustLevel, operation: string): boolean;
+export declare function getTrustLevelLabel(level: TrustLevel): string;
+//# sourceMappingURL=trust-level.d.ts.map

package/dist/domain/entities/trust-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-level.d.ts","sourceRoot":"","sources":["../../../src/domain/entities/trust-level.ts"],"names":[],"mappings":"AAAA,oBAAY,UAAU;IACpB,SAAS,IAAI;IACb,QAAQ,IAAI;IACZ,QAAQ,IAAI;IACZ,OAAO,IAAI;IACX,UAAU,IAAI;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAIhF,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAMlE,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAS5D"}

package/dist/domain/entities/trust-level.js

@@ -0,0 +1,35 @@
+export var TrustLevel;
+(function (TrustLevel) {
+    TrustLevel[TrustLevel["UNTRUSTED"] = 0] = "UNTRUSTED";
+    TrustLevel[TrustLevel["VERIFIED"] = 1] = "VERIFIED";
+    TrustLevel[TrustLevel["ATTESTED"] = 2] = "ATTESTED";
+    TrustLevel[TrustLevel["TRUSTED"] = 3] = "TRUSTED";
+    TrustLevel[TrustLevel["PRIVILEGED"] = 4] = "PRIVILEGED";
+})(TrustLevel || (TrustLevel = {}));
+export const TRUST_TRANSITION_THRESHOLDS = {
+    '1->2': { upgradeScore: 0.7, downgradeScore: 0.5, minInteractions: 50 },
+    '2->3': { upgradeScore: 0.85, downgradeScore: 0.65, minInteractions: 500 },
+    '3->4': { upgradeScore: 0.95, downgradeScore: 0.8, minInteractions: 5000 },
+};
+export const CAPABILITY_GATES = {
+    [TrustLevel.UNTRUSTED]: ['discovery'],
+    [TrustLevel.VERIFIED]: ['discovery', 'status', 'ping'],
+    [TrustLevel.ATTESTED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted'],
+    [TrustLevel.TRUSTED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted', 'share-context', 'collaborative-task'],
+    [TrustLevel.PRIVILEGED]: ['discovery', 'status', 'ping', 'send', 'receive', 'query-redacted', 'share-context', 'collaborative-task', 'full-memory', 'remote-spawn'],
+};
+export function isOperationAllowed(trustLevel, operation) {
+    const allowed = CAPABILITY_GATES[trustLevel];
+    return allowed.includes(operation);
+}
+export function getTrustLevelLabel(level) {
+    const labels = {
+        [TrustLevel.UNTRUSTED]: 'UNTRUSTED',
+        [TrustLevel.VERIFIED]: 'VERIFIED',
+        [TrustLevel.ATTESTED]: 'ATTESTED',
+        [TrustLevel.TRUSTED]: 'TRUSTED',
+        [TrustLevel.PRIVILEGED]: 'PRIVILEGED',
+    };
+    return labels[level];
+}
+//# sourceMappingURL=trust-level.js.map

package/dist/domain/entities/trust-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-level.js","sourceRoot":"","sources":["../../../src/domain/entities/trust-level.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,qDAAa,CAAA;IACb,mDAAY,CAAA;IACZ,mDAAY,CAAA;IACZ,iDAAW,CAAA;IACX,uDAAc,CAAA;AAChB,CAAC,EANW,UAAU,KAAV,UAAU,QAMrB;AAQD,MAAM,CAAC,MAAM,2BAA2B,GAA6C;IACnF,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE;IACvE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE;IAC1E,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE;CAC3E,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAA0C;IACrE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC;IACrC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC;IACtD,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC;IAC3F,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,CAAC;IACjI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,CAAC;CACpK,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,UAAsB,EAAE,SAAiB;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,MAAM,GAA+B;QACzC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW;QACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU;QACjC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,UAAU;QACjC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,SAAS;QAC/B,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,YAAY;KACtC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/domain/services/audit-service.d.ts

@@ -0,0 +1,69 @@
+export type FederationAuditEventType = 'peer_discovered' | 'peer_manifest_published' | 'handshake_initiated' | 'handshake_completed' | 'handshake_failed' | 'handshake_rejected' | 'session_created' | 'session_renewed' | 'session_expired' | 'session_terminated' | 'message_sent' | 'message_received' | 'message_rejected' | 'message_timeout' | 'pii_detected' | 'pii_stripped' | 'pii_blocked' | 'threat_detected' | 'threat_blocked' | 'threat_learned' | 'claim_checked' | 'claim_denied' | 'trust_level_changed' | 'consensus_proposed' | 'consensus_voted' | 'consensus_reached' | 'consensus_failed';
+export type AuditSeverity = 'info' | 'warn' | 'error' | 'critical';
+export type AuditCategory = 'discovery' | 'handshake' | 'message' | 'pii' | 'security' | 'consensus';
+export type ComplianceMode = 'hipaa' | 'soc2' | 'gdpr' | 'none';
+export interface FederationAuditEvent {
+    readonly eventId: string;
+    readonly timestamp: string;
+    readonly nodeId: string;
+    readonly sessionId?: string;
+    readonly eventType: FederationAuditEventType;
+    readonly severity: AuditSeverity;
+    readonly category: AuditCategory;
+    readonly sourceNodeId?: string;
+    readonly targetNodeId?: string;
+    readonly agentId?: string;
+    readonly trustLevel?: number;
+    readonly piiDetected?: boolean;
+    readonly piiTypesFound?: string[];
+    readonly piiAction?: string;
+    readonly threatDetected?: boolean;
+    readonly threatTypes?: string[];
+    readonly claimsChecked?: string[];
+    readonly claimsResult?: 'granted' | 'denied';
+    readonly latencyMs?: number;
+    readonly messageSizeBytes?: number;
+    readonly complianceMode?: ComplianceMode;
+    readonly dataResidency?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface AuditQuery {
+    readonly eventType?: FederationAuditEventType;
+    readonly severity?: AuditSeverity;
+    readonly category?: AuditCategory;
+    readonly nodeId?: string;
+    readonly sessionId?: string;
+    readonly since?: Date;
+    readonly until?: Date;
+    readonly limit?: number;
+    readonly offset?: number;
+}
+export type AuditExportFormat = 'json' | 'csv' | 'ndjson';
+export interface AuditServiceDeps {
+    generateEventId: () => string;
+    getLocalNodeId: () => string;
+    persistEvent: (event: FederationAuditEvent) => Promise<void>;
+    queryEvents: (query: AuditQuery) => Promise<FederationAuditEvent[]>;
+    onAuditEvent?: (event: FederationAuditEvent) => void;
+}
+export interface AuditServiceConfig {
+    readonly complianceMode: ComplianceMode;
+    readonly dataResidency?: string;
+    readonly retentionDays: number;
+    readonly batchSize: number;
+}
+export declare class AuditService {
+    private readonly deps;
+    private readonly config;
+    private readonly buffer;
+    constructor(deps: AuditServiceDeps, config?: Partial<AuditServiceConfig>);
+    log(eventType: FederationAuditEventType, details?: Partial<Omit<FederationAuditEvent, 'eventId' | 'timestamp' | 'nodeId' | 'eventType' | 'severity' | 'category' | 'complianceMode'>>): Promise<FederationAuditEvent>;
+    query(query: AuditQuery): Promise<FederationAuditEvent[]>;
+    export(query: AuditQuery, format: AuditExportFormat): Promise<string>;
+    flush(): Promise<void>;
+    getBufferSize(): number;
+    private buildEvent;
+    private applyHipaaCompliance;
+    private toCsv;
+}
+//# sourceMappingURL=audit-service.d.ts.map

package/dist/domain/services/audit-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-service.d.ts","sourceRoot":"","sources":["../../../src/domain/services/audit-service.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GAAG,yBAAyB,GAC7C,qBAAqB,GAAG,qBAAqB,GAC7C,kBAAkB,GAAG,oBAAoB,GACzC,iBAAiB,GAAG,iBAAiB,GACrC,iBAAiB,GAAG,oBAAoB,GACxC,cAAc,GAAG,kBAAkB,GACnC,kBAAkB,GAAG,iBAAiB,GACtC,cAAc,GAAG,cAAc,GAAG,aAAa,GAC/C,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,GACvD,eAAe,GAAG,cAAc,GAAG,qBAAqB,GACxD,oBAAoB,GAAG,iBAAiB,GACxC,mBAAmB,GAAG,kBAAkB,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,CAAC;AAErG,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAE7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,YAAY,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,WAAW,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACpE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAoED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;gBAEpC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAMlE,GAAG,CACP,SAAS,EAAE,wBAAwB,EACnC,OAAO,GAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,gBAAgB,CAAC,CAAM,GAC/I,OAAO,CAAC,oBAAoB,CAAC;IAa1B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAKzD,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAarE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,KAAK;CAmBd"}

package/dist/domain/services/audit-service.js

@@ -0,0 +1,149 @@
+const DEFAULT_AUDIT_CONFIG = {
+    complianceMode: 'none',
+    retentionDays: 90,
+    batchSize: 100,
+};
+const SEVERITY_BY_EVENT_TYPE = {
+    peer_discovered: 'info',
+    peer_manifest_published: 'info',
+    handshake_initiated: 'info',
+    handshake_completed: 'info',
+    handshake_failed: 'warn',
+    handshake_rejected: 'warn',
+    session_created: 'info',
+    session_renewed: 'info',
+    session_expired: 'info',
+    session_terminated: 'info',
+    message_sent: 'info',
+    message_received: 'info',
+    message_rejected: 'warn',
+    message_timeout: 'warn',
+    pii_detected: 'warn',
+    pii_stripped: 'info',
+    pii_blocked: 'warn',
+    threat_detected: 'error',
+    threat_blocked: 'critical',
+    threat_learned: 'info',
+    claim_checked: 'info',
+    claim_denied: 'warn',
+    trust_level_changed: 'warn',
+    consensus_proposed: 'info',
+    consensus_voted: 'info',
+    consensus_reached: 'info',
+    consensus_failed: 'warn',
+};
+const CATEGORY_BY_EVENT_TYPE = {
+    peer_discovered: 'discovery',
+    peer_manifest_published: 'discovery',
+    handshake_initiated: 'handshake',
+    handshake_completed: 'handshake',
+    handshake_failed: 'handshake',
+    handshake_rejected: 'handshake',
+    session_created: 'handshake',
+    session_renewed: 'handshake',
+    session_expired: 'handshake',
+    session_terminated: 'handshake',
+    message_sent: 'message',
+    message_received: 'message',
+    message_rejected: 'message',
+    message_timeout: 'message',
+    pii_detected: 'pii',
+    pii_stripped: 'pii',
+    pii_blocked: 'pii',
+    threat_detected: 'security',
+    threat_blocked: 'security',
+    threat_learned: 'security',
+    claim_checked: 'security',
+    claim_denied: 'security',
+    trust_level_changed: 'security',
+    consensus_proposed: 'consensus',
+    consensus_voted: 'consensus',
+    consensus_reached: 'consensus',
+    consensus_failed: 'consensus',
+};
+export class AuditService {
+    deps;
+    config;
+    buffer;
+    constructor(deps, config) {
+        this.deps = deps;
+        this.config = { ...DEFAULT_AUDIT_CONFIG, ...config };
+        this.buffer = [];
+    }
+    async log(eventType, details = {}) {
+        const event = this.buildEvent(eventType, details);
+        this.buffer.push(event);
+        this.deps.onAuditEvent?.(event);
+        if (this.buffer.length >= this.config.batchSize || event.severity === 'critical') {
+            await this.flush();
+        }
+        return event;
+    }
+    async query(query) {
+        await this.flush();
+        return this.deps.queryEvents(query);
+    }
+    async export(query, format) {
+        const events = await this.query(query);
+        switch (format) {
+            case 'json':
+                return JSON.stringify(events, null, 2);
+            case 'ndjson':
+                return events.map(e => JSON.stringify(e)).join('\n');
+            case 'csv':
+                return this.toCsv(events);
+        }
+    }
+    async flush() {
+        const eventsToFlush = this.buffer.splice(0, this.buffer.length);
+        for (const event of eventsToFlush) {
+            await this.deps.persistEvent(event);
+        }
+    }
+    getBufferSize() {
+        return this.buffer.length;
+    }
+    buildEvent(eventType, details) {
+        const event = {
+            eventId: this.deps.generateEventId(),
+            timestamp: new Date().toISOString(),
+            nodeId: this.deps.getLocalNodeId(),
+            eventType,
+            severity: SEVERITY_BY_EVENT_TYPE[eventType],
+            category: CATEGORY_BY_EVENT_TYPE[eventType],
+            complianceMode: this.config.complianceMode,
+            dataResidency: this.config.dataResidency,
+            ...details,
+        };
+        if (this.config.complianceMode === 'hipaa') {
+            return this.applyHipaaCompliance(event);
+        }
+        return event;
+    }
+    applyHipaaCompliance(event) {
+        if (event.piiDetected && event.metadata) {
+            const sanitizedMetadata = { ...event.metadata };
+            delete sanitizedMetadata['rawContent'];
+            delete sanitizedMetadata['originalValue'];
+            return { ...event, metadata: sanitizedMetadata };
+        }
+        return event;
+    }
+    toCsv(events) {
+        if (events.length === 0)
+            return '';
+        const headers = [
+            'eventId', 'timestamp', 'nodeId', 'eventType', 'severity',
+            'category', 'sourceNodeId', 'targetNodeId', 'sessionId',
+            'trustLevel', 'piiDetected', 'threatDetected', 'latencyMs',
+        ];
+        const rows = events.map(e => headers.map(h => {
+            const val = e[h];
+            if (val === undefined || val === null)
+                return '';
+            return String(val);
+        }).join(','));
+        return [headers.join(','), ...rows].join('\n');
+    }
+}
+//# sourceMappingURL=audit-service.js.map