@decionis/agent-safe-pipeline 0.1.2

package/dist/http/BoundedResponseBody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BoundedResponseBody.js","sourceRoot":"","sources":["../../src/http/BoundedResponseBody.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,mBAAmB;IACvB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAkB,EAAE,QAAgB;QAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC/B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7C,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/intent/CanonicalIntentHasher.d.ts

@@ -0,0 +1,20 @@
+import type { AuthorityIntentBinding, CapturedIntent, ExecutionIntent } from "./ExecutionIntent.js";
+import type { JsonValue } from "./JsonValue.js";
+export interface CanonicalLimits {
+    readonly maxDepth: number;
+    readonly maxEntries: number;
+    readonly maxArrayLength: number;
+    readonly maxBytes: number;
+}
+export declare class CanonicalIntentHasher {
+    private readonly limits;
+    constructor(limits?: Partial<CanonicalLimits>);
+    capture(intent: ExecutionIntent): CapturedIntent;
+    assertInputBounded(value: unknown): void;
+    static bindingOf(intent: ExecutionIntent): AuthorityIntentBinding;
+    static stringify(value: JsonValue): string;
+    private static canonicalize;
+    private static deepFreeze;
+    private assertBounded;
+}
+//# sourceMappingURL=CanonicalIntentHasher.d.ts.map

package/dist/intent/CanonicalIntentHasher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CanonicalIntentHasher.d.ts","sourceRoot":"","sources":["../../src/intent/CanonicalIntentHasher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAIhD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAEtB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAS7C,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,cAAc;IAqBhD,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI;WAoDjC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,sBAAsB;WA8B1D,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,YAAY;IAW3B,OAAO,CAAC,MAAM,CAAC,UAAU;IAUzB,OAAO,CAAC,aAAa;CAoBtB"}

package/dist/intent/CanonicalIntentHasher.js

@@ -0,0 +1,162 @@
+import { createHash } from "node:crypto";
+const FORBIDDEN_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+export class CanonicalIntentHasher {
+    limits;
+    constructor(limits) {
+        this.limits = {
+            maxDepth: limits?.maxDepth ?? 20,
+            maxEntries: limits?.maxEntries ?? 5_000,
+            maxArrayLength: limits?.maxArrayLength ?? 1_000,
+            maxBytes: limits?.maxBytes ?? 100 * 1024,
+        };
+    }
+    capture(intent) {
+        const binding = CanonicalIntentHasher.bindingOf(intent);
+        let entries = 0;
+        this.assertBounded(binding, 0, () => {
+            entries += 1;
+            if (entries > this.limits.maxEntries) {
+                throw new Error("INTENT_TOO_COMPLEX");
+            }
+        });
+        const canonicalIntent = CanonicalIntentHasher.stringify(binding);
+        const byteLength = Buffer.byteLength(canonicalIntent, "utf8");
+        if (byteLength > this.limits.maxBytes)
+            throw new Error("INTENT_TOO_LARGE");
+        const digest = createHash("sha256").update(canonicalIntent, "utf8").digest("hex");
+        return Object.freeze({
+            intent: CanonicalIntentHasher.deepFreeze(intent),
+            canonicalIntent,
+            intentHash: `sha256:${digest}`,
+            byteLength,
+        });
+    }
+    assertInputBounded(value) {
+        const pending = [{ value, depth: 0, leaving: false }];
+        const ancestors = new WeakSet();
+        let entries = 0;
+        while (pending.length > 0) {
+            const current = pending.pop();
+            if (current === undefined || current.value === null || typeof current.value !== "object") {
+                continue;
+            }
+            if (current.leaving) {
+                ancestors.delete(current.value);
+                continue;
+            }
+            if (current.depth > this.limits.maxDepth)
+                throw new Error("INTENT_TOO_DEEP");
+            if (ancestors.has(current.value))
+                throw new Error("CYCLIC_INTENT");
+            ancestors.add(current.value);
+            pending.push({ value: current.value, depth: current.depth, leaving: true });
+            if (Array.isArray(current.value)) {
+                if (current.value.length > this.limits.maxArrayLength) {
+                    throw new Error("INTENT_ARRAY_TOO_LARGE");
+                }
+                for (const child of current.value) {
+                    entries += 1;
+                    if (entries > this.limits.maxEntries)
+                        throw new Error("INTENT_TOO_COMPLEX");
+                    pending.push({ value: child, depth: current.depth + 1, leaving: false });
+                }
+                continue;
+            }
+            const prototype = Object.getPrototypeOf(current.value);
+            if (prototype !== Object.prototype && prototype !== null) {
+                throw new Error("INVALID_JSON_OBJECT");
+            }
+            for (const key of Object.keys(current.value)) {
+                if (FORBIDDEN_KEYS.has(key))
+                    throw new Error("UNSAFE_INTENT_KEY");
+                entries += 1;
+                if (entries > this.limits.maxEntries)
+                    throw new Error("INTENT_TOO_COMPLEX");
+                pending.push({
+                    value: current.value[key],
+                    depth: current.depth + 1,
+                    leaving: false,
+                });
+            }
+        }
+    }
+    static bindingOf(intent) {
+        return {
+            protocol_version: intent.version,
+            tenant_id: intent.tenantId,
+            intent_id: intent.intentId,
+            idempotency_key: intent.idempotencyKey,
+            captured_at: intent.capturedAt,
+            expires_at: intent.expiresAt,
+            actor: {
+                id: intent.actor.id,
+                type: intent.actor.type,
+                ...(intent.actor.runtime === undefined ? {} : { runtime: intent.actor.runtime }),
+                ...(intent.actor.trustLevel === undefined ? {} : { trust_level: intent.actor.trustLevel }),
+            },
+            action: {
+                type: intent.action,
+                resource: intent.target,
+                parameters: intent.parameters,
+            },
+            context: intent.context,
+            downstream_target: {
+                system: intent.downstreamTarget.system,
+                operation: intent.downstreamTarget.operation,
+                ...(intent.downstreamTarget.endpoint === undefined
+                    ? {}
+                    : { endpoint: intent.downstreamTarget.endpoint }),
+            },
+        };
+    }
+    static stringify(value) {
+        return JSON.stringify(CanonicalIntentHasher.canonicalize(value));
+    }
+    static canonicalize(value) {
+        if (Array.isArray(value))
+            return value.map((item) => CanonicalIntentHasher.canonicalize(item));
+        if (value === null || typeof value !== "object")
+            return value;
+        const normalized = {};
+        for (const key of Object.keys(value).sort()) {
+            const entry = value[key];
+            if (entry !== undefined)
+                normalized[key] = CanonicalIntentHasher.canonicalize(entry);
+        }
+        return normalized;
+    }
+    static deepFreeze(value) {
+        if (value && typeof value === "object" && !Object.isFrozen(value)) {
+            Object.freeze(value);
+            for (const child of Object.values(value)) {
+                CanonicalIntentHasher.deepFreeze(child);
+            }
+        }
+        return value;
+    }
+    assertBounded(value, depth, count) {
+        if (depth > this.limits.maxDepth)
+            throw new Error("INTENT_TOO_DEEP");
+        if (value === null || typeof value !== "object") {
+            if (typeof value === "number" && !Number.isFinite(value))
+                throw new Error("INVALID_NUMBER");
+            return;
+        }
+        if (Array.isArray(value)) {
+            if (value.length > this.limits.maxArrayLength)
+                throw new Error("INTENT_ARRAY_TOO_LARGE");
+            for (const child of value) {
+                count();
+                this.assertBounded(child, depth + 1, count);
+            }
+            return;
+        }
+        for (const [key, child] of Object.entries(value)) {
+            if (FORBIDDEN_KEYS.has(key))
+                throw new Error("UNSAFE_INTENT_KEY");
+            count();
+            this.assertBounded(child, depth + 1, count);
+        }
+    }
+}
+//# sourceMappingURL=CanonicalIntentHasher.js.map

package/dist/intent/CanonicalIntentHasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CanonicalIntentHasher.js","sourceRoot":"","sources":["../../src/intent/CanonicalIntentHasher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAS1E,MAAM,OAAO,qBAAqB;IACf,MAAM,CAAkB;IAEzC,YAAmB,MAAiC;QAClD,IAAI,CAAC,MAAM,GAAG;YACZ,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE;YAChC,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,KAAK;YACvC,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,KAAK;YAC/C,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,GAAG,GAAG,IAAI;SACzC,CAAC;IACJ,CAAC;IAEM,OAAO,CAAC,MAAuB;QACpC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,CAAC,OAA+B,EAAE,CAAC,EAAE,GAAG,EAAE;YAC1D,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAA+B,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC;YAChD,eAAe;YACf,UAAU,EAAE,UAAU,MAAM,EAAE;YAC9B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAEM,kBAAkB,CAAC,KAAc;QACtC,MAAM,OAAO,GAIR,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,OAAO,EAAU,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzF,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC7E,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC5C,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBAClC,OAAO,IAAI,CAAC,CAAC;oBACb,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAY,CAAC;YAClE,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAClE,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAC5E,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAG,OAAO,CAAC,KAAiC,CAAC,GAAG,CAAC;oBACtD,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC;oBACxB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,MAAuB;QAC7C,OAAO;YACL,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,eAAe,EAAE,MAAM,CAAC,cAAc;YACtC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,KAAK,EAAE;gBACL,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBACnB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;gBACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;aAC3F;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,QAAQ,EAAE,MAAM,CAAC,MAAM;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;YACD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,iBAAiB,EAAE;gBACjB,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM;gBACtC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS;gBAC5C,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,KAAK,SAAS;oBAChD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;aACpD;SACF,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,SAAS,CAAC,KAAgB;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,KAAgB;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,UAAU,GAA8B,EAAE,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,MAAM,CAAC,UAAU,CAAI,KAAQ;QACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACpE,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,KAAgB,EAAE,KAAa,EAAE,KAAiB;QACtE,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzF,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,KAAK,EAAE,CAAC;gBACR,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAClE,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF"}

package/dist/intent/ExecutionIntent.d.ts

@@ -0,0 +1,96 @@
+import { z } from "zod";
+import { type JsonObject } from "./JsonValue.js";
+export declare const AgentProposalSchema: z.ZodObject<{
+    action: z.ZodString;
+    target: z.ZodString;
+    parameters: z.ZodDefault<z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>>;
+}, z.core.$strict>;
+export declare const IntentActorSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodString;
+    runtime: z.ZodOptional<z.ZodString>;
+    trustLevel: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const DownstreamTargetSchema: z.ZodObject<{
+    system: z.ZodString;
+    operation: z.ZodString;
+    endpoint: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const TrustedIntentContextSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    actor: z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodString;
+        runtime: z.ZodOptional<z.ZodString>;
+        trustLevel: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    downstreamTarget: z.ZodObject<{
+        system: z.ZodString;
+        operation: z.ZodString;
+        endpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    context: z.ZodDefault<z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export declare const ExecutionIntentSchema: z.ZodObject<{
+    version: z.ZodLiteral<"agent-safe.intent/1">;
+    intentId: z.ZodString;
+    tenantId: z.ZodString;
+    capturedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    actor: z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodString;
+        runtime: z.ZodOptional<z.ZodString>;
+        trustLevel: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    action: z.ZodString;
+    target: z.ZodString;
+    parameters: z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>;
+    downstreamTarget: z.ZodObject<{
+        system: z.ZodString;
+        operation: z.ZodString;
+        endpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    context: z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>;
+    correlationId: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type AgentProposal = z.infer<typeof AgentProposalSchema>;
+export type IntentActor = z.infer<typeof IntentActorSchema>;
+export type DownstreamTarget = z.infer<typeof DownstreamTargetSchema>;
+export type TrustedIntentContext = z.infer<typeof TrustedIntentContextSchema>;
+export type ExecutionIntent = z.infer<typeof ExecutionIntentSchema>;
+export interface CapturedIntent {
+    readonly intent: Readonly<ExecutionIntent>;
+    readonly canonicalIntent: string;
+    readonly intentHash: `sha256:${string}`;
+    readonly byteLength: number;
+}
+export interface AuthorityIntentBinding {
+    readonly protocol_version: "agent-safe.intent/1";
+    readonly tenant_id: string;
+    readonly intent_id: string;
+    readonly idempotency_key: string;
+    readonly captured_at: string;
+    readonly expires_at: string;
+    readonly actor: {
+        readonly id: string;
+        readonly type: string;
+        readonly runtime?: string;
+        readonly trust_level?: string;
+    };
+    readonly action: {
+        readonly type: string;
+        readonly resource: string;
+        readonly parameters: JsonObject;
+    };
+    readonly context: JsonObject;
+    readonly downstream_target: {
+        readonly system: string;
+        readonly operation: string;
+        readonly endpoint?: string;
+    };
+}
+//# sourceMappingURL=ExecutionIntent.d.ts.map

package/dist/intent/ExecutionIntent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionIntent.d.ts","sourceRoot":"","sources":["../../src/intent/ExecutionIntent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAUnE,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;kBAOnB,CAAC;AAEZ,eAAO,MAAM,sBAAsB;;;;kBAMxB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;kBAS5B,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;kBAgBvB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH"}

package/dist/intent/ExecutionIntent.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { JsonObjectSchema } from "./JsonValue.js";
+const boundedId = z.string().trim().min(1).max(200);
+const actionName = z
+    .string()
+    .trim()
+    .min(1)
+    .max(120)
+    .regex(/^[a-z][a-z0-9._:-]*$/);
+export const AgentProposalSchema = z
+    .object({
+    action: actionName,
+    target: z.string().trim().min(1).max(500),
+    parameters: JsonObjectSchema.default({}),
+})
+    .strict();
+export const IntentActorSchema = z
+    .object({
+    id: boundedId,
+    type: boundedId,
+    runtime: boundedId.optional(),
+    trustLevel: z.string().trim().min(1).max(80).optional(),
+})
+    .strict();
+export const DownstreamTargetSchema = z
+    .object({
+    system: boundedId,
+    operation: boundedId,
+    endpoint: z.string().trim().min(1).max(500).optional(),
+})
+    .strict();
+export const TrustedIntentContextSchema = z
+    .object({
+    tenantId: z.string().uuid(),
+    actor: IntentActorSchema,
+    downstreamTarget: DownstreamTargetSchema,
+    context: JsonObjectSchema.default({}),
+    correlationId: boundedId.optional(),
+    idempotencyKey: z.string().trim().min(1).max(180),
+})
+    .strict();
+export const ExecutionIntentSchema = z
+    .object({
+    version: z.literal("agent-safe.intent/1"),
+    intentId: z.string().uuid(),
+    tenantId: z.string().uuid(),
+    capturedAt: z.string().datetime(),
+    expiresAt: z.string().datetime(),
+    actor: IntentActorSchema,
+    action: actionName,
+    target: z.string().trim().min(1).max(500),
+    parameters: JsonObjectSchema,
+    downstreamTarget: DownstreamTargetSchema,
+    context: JsonObjectSchema,
+    correlationId: boundedId.optional(),
+    idempotencyKey: z.string().trim().min(1).max(180),
+})
+    .strict();
+//# sourceMappingURL=ExecutionIntent.js.map

package/dist/intent/ExecutionIntent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionIntent.js","sourceRoot":"","sources":["../../src/intent/ExecutionIntent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAmB,MAAM,gBAAgB,CAAC;AAEnE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,KAAK,EAAE,iBAAiB;IACxB,gBAAgB,EAAE,sBAAsB;IACxC,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,iBAAiB;IACxB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,UAAU,EAAE,gBAAgB;IAC5B,gBAAgB,EAAE,sBAAsB;IACxC,OAAO,EAAE,gBAAgB;IACzB,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAClD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/intent/IntentCapture.d.ts

@@ -0,0 +1,17 @@
+import { type AgentProposal, type CapturedIntent, type TrustedIntentContext } from "./ExecutionIntent.js";
+import { CanonicalIntentHasher } from "./CanonicalIntentHasher.js";
+export interface IntentCaptureOptions {
+    readonly hasher?: CanonicalIntentHasher;
+    readonly clock?: () => Date;
+    readonly createId?: () => string;
+    readonly ttlSeconds?: number;
+}
+export declare class IntentCapture {
+    private readonly hasher;
+    private readonly clock;
+    private readonly createId;
+    private readonly ttlSeconds;
+    constructor(options?: IntentCaptureOptions);
+    capture(proposalInput: AgentProposal, trustedInput: TrustedIntentContext): CapturedIntent;
+}
+//# sourceMappingURL=IntentCapture.d.ts.map

package/dist/intent/IntentCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntentCapture.d.ts","sourceRoot":"","sources":["../../src/intent/IntentCapture.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAEjB,OAAO,CAAC,EAAE,oBAAoB;IAO1C,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,oBAAoB,GAAG,cAAc;CAwBjG"}

package/dist/intent/IntentCapture.js

@@ -0,0 +1,40 @@
+import { randomUUID } from "node:crypto";
+import { AgentProposalSchema, ExecutionIntentSchema, TrustedIntentContextSchema, } from "./ExecutionIntent.js";
+import { CanonicalIntentHasher } from "./CanonicalIntentHasher.js";
+export class IntentCapture {
+    hasher;
+    clock;
+    createId;
+    ttlSeconds;
+    constructor(options) {
+        this.hasher = options?.hasher ?? new CanonicalIntentHasher();
+        this.clock = options?.clock ?? (() => new Date());
+        this.createId = options?.createId ?? randomUUID;
+        this.ttlSeconds = Math.min(Math.max(options?.ttlSeconds ?? 60, 1), 300);
+    }
+    capture(proposalInput, trustedInput) {
+        this.hasher.assertInputBounded(proposalInput);
+        this.hasher.assertInputBounded(trustedInput);
+        const proposal = AgentProposalSchema.parse(proposalInput);
+        const trusted = TrustedIntentContextSchema.parse(trustedInput);
+        const capturedAt = this.clock();
+        const expiresAt = new Date(capturedAt.valueOf() + this.ttlSeconds * 1_000);
+        const intent = ExecutionIntentSchema.parse({
+            version: "agent-safe.intent/1",
+            intentId: this.createId(),
+            tenantId: trusted.tenantId,
+            capturedAt: capturedAt.toISOString(),
+            expiresAt: expiresAt.toISOString(),
+            actor: trusted.actor,
+            action: proposal.action,
+            target: proposal.target,
+            parameters: proposal.parameters,
+            downstreamTarget: trusted.downstreamTarget,
+            context: trusted.context,
+            ...(trusted.correlationId === undefined ? {} : { correlationId: trusted.correlationId }),
+            idempotencyKey: trusted.idempotencyKey,
+        });
+        return this.hasher.capture(intent);
+    }
+}
+//# sourceMappingURL=IntentCapture.js.map

package/dist/intent/IntentCapture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntentCapture.js","sourceRoot":"","sources":["../../src/intent/IntentCapture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,GAI3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AASnE,MAAM,OAAO,aAAa;IACP,MAAM,CAAwB;IAC9B,KAAK,CAAa;IAClB,QAAQ,CAAe;IACvB,UAAU,CAAS;IAEpC,YAAmB,OAA8B;QAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QAC7D,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,UAAU,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IAEM,OAAO,CAAC,aAA4B,EAAE,YAAkC;QAC7E,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC;YACzC,OAAO,EAAE,qBAAqB;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YACxF,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/intent/JsonValue.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export type JsonPrimitive = boolean | number | string | null;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type JsonObject = {
+    [key: string]: JsonValue;
+};
+export declare const JsonValueSchema: z.ZodType<JsonValue>;
+export declare const JsonObjectSchema: z.ZodType<JsonObject>;
+//# sourceMappingURL=JsonValue.d.ts.map

package/dist/intent/JsonValue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonValue.d.ts","sourceRoot":"","sources":["../../src/intent/JsonValue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACnF,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtD,eAAO,MAAM,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAShD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAyC,CAAC"}

package/dist/intent/JsonValue.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export const JsonValueSchema = z.lazy(() => z.union([
+    z.boolean(),
+    z.number().finite(),
+    z.string(),
+    z.null(),
+    z.array(JsonValueSchema),
+    z.record(z.string(), JsonValueSchema),
+]));
+export const JsonObjectSchema = z.record(z.string(), JsonValueSchema);
+//# sourceMappingURL=JsonValue.js.map

package/dist/intent/JsonValue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonValue.js","sourceRoot":"","sources":["../../src/intent/JsonValue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,CAAC,MAAM,eAAe,GAAyB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/D,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IACnB,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;CACtC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAA0B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC"}

package/dist/shadow/ShadowPipeline.d.ts

@@ -0,0 +1,13 @@
+import type { DecisionAuthority, GateDecision } from "../decision/DecisionAuthority.js";
+import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+export interface ShadowComparison<TResult> {
+    readonly mode: "SHADOW";
+    readonly productionResult: TResult;
+    readonly hypotheticalDecision: GateDecision;
+}
+export declare class ShadowPipeline {
+    private readonly authority;
+    constructor(authority: DecisionAuthority);
+    compare<TResult>(captured: CapturedIntent, existingExecution: () => Promise<TResult> | TResult): Promise<ShadowComparison<TResult>>;
+}
+//# sourceMappingURL=ShadowPipeline.d.ts.map

package/dist/shadow/ShadowPipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShadowPipeline.d.ts","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,WAAW,gBAAgB,CAAC,OAAO;IACvC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,YAAY,CAAC;CAC7C;AAED,qBAAa,cAAc;IACN,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,iBAAiB;IAEnD,OAAO,CAAC,OAAO,EAC1B,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAClD,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;CAOtC"}

package/dist/shadow/ShadowPipeline.js

@@ -0,0 +1,14 @@
+export class ShadowPipeline {
+    authority;
+    constructor(authority) {
+        this.authority = authority;
+    }
+    async compare(captured, existingExecution) {
+        const [productionResult, hypotheticalDecision] = await Promise.all([
+            existingExecution(),
+            this.authority.evaluate(captured),
+        ]);
+        return { mode: "SHADOW", productionResult, hypotheticalDecision };
+    }
+}
+//# sourceMappingURL=ShadowPipeline.js.map

package/dist/shadow/ShadowPipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShadowPipeline.js","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,cAAc;IACW;IAApC,YAAoC,SAA4B;QAA5B,cAAS,GAAT,SAAS,CAAmB;IAAG,CAAC;IAE7D,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,iBAAmD;QAEnD,MAAM,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,iBAAiB,EAAE;YACnB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;IACpE,CAAC;CACF"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@decionis/agent-safe-pipeline",
+  "version": "0.1.2",
+  "description": "An execution architecture where AI agents may propose actions but cannot authorize their own execution.",
+  "license": "Apache-2.0",
+  "author": "Decionis, Inc.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/decionis/agent-safe-pipeline.git",
+    "directory": "packages/pipeline"
+  },
+  "bugs": {
+    "url": "https://github.com/decionis/agent-safe-pipeline/issues"
+  },
+  "homepage": "https://github.com/decionis/agent-safe-pipeline/tree/master/packages/pipeline#readme",
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "main": "./dist/Index.js",
+  "types": "./dist/Index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/Index.d.ts",
+      "import": "./dist/Index.js"
+    }
+  },
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "dependencies": {
+    "@decionis/presence-node": "^0.2.0",
+    "jose": "^6.2.8",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@stryker-mutator/core": "10.0.0",
+    "@stryker-mutator/vitest-runner": "10.0.0",
+    "@vitest/coverage-v8": "^4.1.10",
+    "vitest": "^4.1.10"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "scripts": {
+    "build": "node ../../scripts/CleanBuildOutput.mjs && tsc -p tsconfig.build.json",
+    "test": "vitest run --coverage",
+    "test:mutation": "stryker run",
+    "test:performance": "vitest run test/performance",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}