@decionis/agent-safe-pipeline 0.1.3 → 0.1.4

package/dist/testing/LocalAuthority.d.ts

@@ -0,0 +1,203 @@
+import { z } from "zod";
+import { type LocalPresence } from "./LocalPresence.js";
+export declare const LOCAL_AUTHORITY_API_KEY = "test-key";
+export declare const AUTONOMOUS_LIMIT_MINOR = 10000;
+export declare const HUMAN_LIMIT_MINOR = 100000;
+/** `ExecutionAuthorityRequest`: the binding plus hash, mode, evidence, and managed constraints. */
+declare const AuthorityRequestSchema: z.ZodObject<{
+    intent_hash: z.ZodString;
+    mode: z.ZodEnum<{
+        ENFORCEMENT: "ENFORCEMENT";
+        SHADOW: "SHADOW";
+    }>;
+    evidence: z.ZodOptional<z.ZodObject<{
+        humanApproval: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodLiteral<"presence">;
+            requestId: z.ZodString;
+            receiptDossierId: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    escalation: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodLiteral<"MANAGED">;
+        approver: z.ZodOptional<z.ZodObject<{
+            principal_id: z.ZodOptional<z.ZodString>;
+            role_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        verification_requirements: z.ZodOptional<z.ZodObject<{
+            methods: z.ZodArray<z.ZodEnum<{
+                WEBAUTHN: "WEBAUTHN";
+                ACTIVE_LIVENESS: "ACTIVE_LIVENESS";
+            }>>;
+            level: z.ZodOptional<z.ZodEnum<{
+                STANDARD: "STANDARD";
+                HIGH_CONFIDENCE: "HIGH_CONFIDENCE";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    protocol_version: z.ZodLiteral<"agent-safe.intent/1">;
+    tenant_id: z.ZodUUID;
+    intent_id: z.ZodUUID;
+    captured_at: z.ZodISODateTime;
+    expires_at: z.ZodISODateTime;
+    actor: z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodString;
+        runtime: z.ZodOptional<z.ZodString>;
+        trust_level: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    action: z.ZodObject<{
+        type: z.ZodString;
+        resource: z.ZodString;
+        parameters: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>;
+    context: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    downstream_target: z.ZodObject<{
+        system: z.ZodString;
+        environment: z.ZodOptional<z.ZodString>;
+        operation: z.ZodString;
+        endpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type LocalAuthorityRequest = z.infer<typeof AuthorityRequestSchema>;
+type Verdict = "ALLOW" | "ESCALATE" | "BLOCK";
+type ManagedStatus = "PENDING_PRESENCE" | "PRESENCE_REQUESTED" | "AWAITING_APPROVER" | "PRESENCE_VERIFIED" | "REAUTHORIZING" | "GRANT_READY" | "EXPIRED" | "REJECTED" | "BLOCKED" | "CANCELLED" | "FAILED";
+type LifecycleEntry = ManagedStatus | {
+    status: ManagedStatus;
+    reasonCodes?: string[];
+};
+type Decision = Record<string, unknown>;
+/** Verdict for an intent evaluated without evidence; evidence handling stays generic. */
+export type LocalAuthorityPolicy = (request: LocalAuthorityRequest) => Verdict;
+export interface LocalRouteOverride {
+    readonly status?: number;
+    readonly body?: unknown;
+    readonly transform?: (body: unknown) => unknown;
+    readonly delayMs?: number;
+    readonly truncateTo?: number;
+    readonly destroy?: boolean;
+}
+export type LocalAuthorityRoute = "enforce" | "status" | "claim" | "finalize";
+export interface LocalAuthorityRequestRecord {
+    readonly method: string;
+    readonly path: string;
+    readonly headers: Readonly<Record<string, string | null>>;
+    body: unknown;
+    recomputedHash: string | null;
+    response: {
+        readonly status: number | null;
+        readonly body: unknown;
+    } | null;
+    readonly at: string;
+}
+export interface LocalGrantRecord {
+    readonly jti: string;
+    readonly tenantId: string;
+    readonly actorId: string;
+    readonly action: string;
+    readonly audience: string;
+    readonly decisionId: string;
+    readonly dossierId: string;
+    readonly intentHash: string;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly nonce: string;
+    readonly bindingDigest: string;
+    /** Present for direct grants issued on client-supplied evidence; null for managed grants. */
+    readonly receiptDossierId: string | null;
+    claimed: boolean;
+    claimToken: string | null;
+    correlationId: string | null;
+    consumedBy: string | null;
+    finalized: "COMMITTED" | "FAILED" | "INDETERMINATE" | null;
+}
+export interface LocalManagedEscalationRecord {
+    readonly escalationId: string;
+    readonly request: LocalAuthorityRequest;
+    /** The `LocalPresence` request this escalation is orchestrated through, if any. */
+    readonly presenceRequestId: string | null;
+    /** Scripted statuses take precedence over orchestration; used to test client state handling. */
+    lifecycle: LifecycleEntry[] | null;
+    lookup: number;
+    status: ManagedStatus;
+    reasonCodes: string[];
+    finalDecision: Decision | null;
+    readonly initialDecision: Decision;
+}
+export interface LocalAuthorityOptions {
+    readonly apiKey?: string;
+    /** Verifies direct evidence and hosts managed escalations. */
+    readonly presence?: LocalPresence;
+    /** Legacy hook used when no `presence` is configured. */
+    readonly verifyReceipt?: (approval: {
+        readonly requestId: string;
+        readonly receiptDossierId: string;
+    }, intentHash: string) => boolean;
+    readonly policy?: LocalAuthorityPolicy;
+    /** Subject routed to for a managed escalation without an approver principal. */
+    readonly managedApproverId?: string;
+    readonly clock?: () => number;
+}
+/**
+ * Independent canonicalization: keys sorted by UTF-16 code unit, values encoded
+ * with JSON.stringify semantics. This deliberately does not import the
+ * package's hasher so the two implementations check each other.
+ */
+export declare function stableStringify(value: unknown): string;
+export declare function hashBinding(binding: unknown): string;
+export declare class LocalAuthority {
+    /** Every request seen, oldest first, with bounded bodies and the response given. */
+    readonly requests: LocalAuthorityRequestRecord[];
+    /** Issued grants keyed by execution token. */
+    readonly grants: Map<string, LocalGrantRecord>;
+    /** Managed escalations keyed by their opaque identifier. */
+    readonly escalations: Map<string, LocalManagedEscalationRecord>;
+    private readonly apiKey;
+    private readonly presence;
+    private readonly legacyVerifyReceipt;
+    private readonly policy;
+    private readonly managedApproverId;
+    private readonly clock;
+    private readonly overrides;
+    private readonly managedByIntent;
+    private nextManagedLifecycle;
+    private decisions;
+    private server;
+    private port;
+    constructor(options?: LocalAuthorityOptions);
+    get baseUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /**
+     * Alters the next response on one route only. `transform` receives the
+     * computed body; `body` replaces it (an object or a raw string); `status`,
+     * `delayMs`, `truncateTo`, and `destroy` shape the transport behavior.
+     */
+    scriptOnce(route: LocalAuthorityRoute, override: LocalRouteOverride): void;
+    /** Statuses returned, in order, for the next managed escalation instead of orchestration. */
+    scriptNextManagedLifecycle(statuses: readonly LifecycleEntry[]): void;
+    private handle;
+    private enforceAndBind;
+    /** Policy plus evidence handling: a valid receipt turns an escalation into an allow. */
+    private evaluate;
+    private verifyEvidence;
+    private baseDecision;
+    private grantDecision;
+    /** Opens a managed escalation: scripted, orchestrated through LocalPresence, or default-scripted. */
+    private openManaged;
+    /** Creates the Presence request the way Decionis does: bound structurally to the intent hash. */
+    private requestPresence;
+    private managedStatus;
+    private scripted;
+    /** Orchestrated state machine, mirroring Decionis's transitions against Presence. */
+    private advance;
+    private cancelManaged;
+    private claim;
+    private finalize;
+    /** Recomputes the hash independently and applies the contract's time rules. */
+    private assertBinding;
+    private respond;
+    private send;
+    private static isTerminal;
+}
+export {};
+//# sourceMappingURL=LocalAuthority.d.ts.map

package/dist/testing/LocalAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAuthority.d.ts","sourceRoot":"","sources":["../../src/testing/LocalAuthority.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAElE,eAAO,MAAM,uBAAuB,aAAa,CAAC;AAClD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAyEzC,mGAAmG;AACnG,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AAuBH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,KAAK,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAC9C,KAAK,aAAa,GACd,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,eAAe,GACf,aAAa,GACb,SAAS,GACT,UAAU,GACV,SAAS,GACT,WAAW,GACX,QAAQ,CAAC;AACb,KAAK,cAAc,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AACxF,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAOxC,yFAAyF;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,EAAE,OAAO,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6FAA6F;IAC7F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,WAAW,GAAG,QAAQ,GAAG,eAAe,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,gGAAgG;IAChG,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,QAAQ,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,EAC3E,UAAU,EAAE,MAAM,KACf,OAAO,CAAC;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAStD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEpD;AAyBD,qBAAa,cAAc;IACzB,oFAAoF;IACpF,SAAgB,QAAQ,EAAE,2BAA2B,EAAE,CAAM;IAC7D,8CAA8C;IAC9C,SAAgB,MAAM,gCAAuC;IAC7D,4DAA4D;IAC5D,SAAgB,WAAW,4CAAmD;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAyC;IAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAKxB;IACF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmD;IACnF,OAAO,CAAC,oBAAoB,CAAiC;IAC7D,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAK;gBAEE,OAAO,GAAE,qBAA0B;IAUtD,IAAW,OAAO,IAAI,MAAM,CAE3B;IAEY,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQlC;;;;OAIG;IACI,UAAU,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAIjF,6FAA6F;IACtF,0BAA0B,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;YAI9D,MAAM;IA0DpB,OAAO,CAAC,cAAc;IAwBtB,wFAAwF;IACxF,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,aAAa;IA6CrB,qGAAqG;IACrG,OAAO,CAAC,WAAW;IAgDnB,iGAAiG;IACjG,OAAO,CAAC,eAAe;IAiDvB,OAAO,CAAC,aAAa;IA8CrB,OAAO,CAAC,QAAQ;IA8BhB,qFAAqF;IACrF,OAAO,CAAC,OAAO;IAqDf,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,KAAK;IAoEb,OAAO,CAAC,QAAQ;IA6BhB,+EAA+E;IAC/E,OAAO,CAAC,aAAa;YAiBP,OAAO;IAmCrB,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,MAAM,CAAC,UAAU;CAU1B"}