@decionis/agent-safe-pipeline 0.1.3 → 0.2.0

package/dist/shadow/ShadowPipeline.d.ts

@@ -1,13 +1,83 @@
-import type { DecisionAuthority, GateDecision } from "../decision/DecisionAuthority.js";
+import type { AuditRecorder } from "../audit/AuditRecorder.js";
+import type { DecisionAuthority, DecisionVerdict } from "../decision/DecisionAuthority.js";
 import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+export type ShadowObservationStatus = "OBSERVED" | "UNAVAILABLE" | "TIMED_OUT" | "INVALID" | "ABORTED";
+/**
+ * Non-authoritative record of what the authority would have decided.
+ *
+ * The shape deliberately has no `authorization` or `failClosed` field, so it
+ * is not structurally assignable to `GateDecision`, and it carries explicit
+ * `mode: "SHADOW"` and `authority: "OBSERVATIONAL"` markers that
+ * `SafeExecutor` rejects at runtime after any cast or JSON round trip.
+ */
+export interface ShadowObservation {
+    readonly mode: "SHADOW";
+    readonly authority: "OBSERVATIONAL";
+    readonly status: ShadowObservationStatus;
+    readonly intentHash: string;
+    /** Policy verdict when the authority answered; `null` when it did not or failed closed. */
+    readonly verdict: DecisionVerdict | null;
+    readonly decisionId: string | null;
+    readonly dossierId: string | null;
+    readonly reasonCodes: readonly string[];
+    /** `true` when the authority returned a grant that this pipeline discarded. */
+    readonly grantDiscarded: boolean;
+    readonly durationMs: number;
+}
+export type ShadowProductionOutcome<TResult> = {
+    readonly status: "COMPLETED";
+    readonly result: TResult;
+} | {
+    readonly status: "FAILED";
+    readonly error: unknown;
+};
+/** Production outcome available immediately; the observation settles on its own bound. */
+export interface ShadowRun<TResult> {
+    readonly mode: "SHADOW";
+    readonly production: ShadowProductionOutcome<TResult>;
+    readonly observation: Promise<ShadowObservation>;
+}
 export interface ShadowComparison<TResult> {
     readonly mode: "SHADOW";
-    readonly productionResult: TResult;
-    readonly hypotheticalDecision: GateDecision;
+    readonly production: ShadowProductionOutcome<TResult>;
+    readonly observation: ShadowObservation;
+}
+export interface ShadowPipelineOptions {
+    /** Optional recorder; every observation is emitted as an `OBSERVATIONAL` `SHADOW_EVALUATED` event. */
+    readonly audit?: AuditRecorder;
+    /** Independent bound on the hypothetical evaluation. Default 2000 ms, clamped to [1, 15000]. */
+    readonly timeoutMs?: number;
+    /** Injectable epoch-millisecond clock for deterministic duration tests. */
+    readonly clock?: () => number;
+}
+export interface ShadowObserveOptions {
+    /** Cancels the observation only; production execution is never cancelled by this pipeline. */
+    readonly signal?: AbortSignal;
 }
+/**
+ * Runs an existing production execution unchanged while asking an authority
+ * what it would have decided. The observation is failure-isolated, bounded,
+ * and never carries execution authority.
+ */
 export declare class ShadowPipeline {
     private readonly authority;
-    constructor(authority: DecisionAuthority);
-    compare<TResult>(captured: CapturedIntent, existingExecution: () => Promise<TResult> | TResult): Promise<ShadowComparison<TResult>>;
+    private readonly audit;
+    private readonly timeoutMs;
+    private readonly clock;
+    constructor(authority: DecisionAuthority, options?: ShadowPipelineOptions);
+    /**
+     * Invokes `existingExecution` exactly once and returns as soon as it settles.
+     * Its result or thrown error is preserved verbatim. The observation promise
+     * never rejects and never delays production.
+     */
+    observe<TResult>(captured: CapturedIntent, existingExecution: () => Promise<TResult> | TResult, options?: ShadowObserveOptions): Promise<ShadowRun<TResult>>;
+    /** `observe`, then wait for the bounded observation so both sides can be compared inline. */
+    compare<TResult>(captured: CapturedIntent, existingExecution: () => Promise<TResult> | TResult, options?: ShadowObserveOptions): Promise<ShadowComparison<TResult>>;
+    private evaluate;
+    private record;
+    private static empty;
+    /** Validates a decision from any authority; the grant, if any, is discarded and reported. */
+    private static classify;
+    private static isBoundedIdentifier;
 }
 //# sourceMappingURL=ShadowPipeline.d.ts.map

package/dist/shadow/ShadowPipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ShadowPipeline.d.ts","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,WAAW,gBAAgB,CAAC,OAAO;IACvC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,YAAY,CAAC;CAC7C;AAED,qBAAa,cAAc;IACN,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,iBAAiB;IAEnD,OAAO,CAAC,OAAO,EAC1B,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GAClD,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;CAOtC"}
+{"version":3,"file":"ShadowPipeline.d.ts","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EAEhB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,MAAM,uBAAuB,GACjC,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,uBAAuB,CAAC,OAAO,IACvC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3D,0FAA0F;AAC1F,MAAM,WAAW,SAAS,CAAC,OAAO;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,gBAAgB,CAAC,OAAO;IACvC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,sGAAsG;IACtG,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAaD;;;;GAIG;AACH,qBAAa,cAAc;IAMvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAL5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAGlB,SAAS,EAAE,iBAAiB,EAC7C,OAAO,GAAE,qBAA0B;IAarC;;;;OAIG;IACU,OAAO,CAAC,OAAO,EAC1B,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,EACnD,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAW9B,6FAA6F;IAChF,OAAO,CAAC,OAAO,EAC1B,QAAQ,EAAE,cAAc,EACxB,iBAAiB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,EACnD,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IASrC,OAAO,CAAC,QAAQ;YAwCF,MAAM;IAiBpB,OAAO,CAAC,MAAM,CAAC,KAAK;IAWpB,6FAA6F;IAC7F,OAAO,CAAC,MAAM,CAAC,QAAQ;IAyCvB,OAAO,CAAC,MAAM,CAAC,mBAAmB;CAUnC"}

package/dist/shadow/ShadowPipeline.js

@@ -1,14 +1,164 @@
+const DEFAULT_TIMEOUT_MS = 2_000;
+const MAX_TIMEOUT_MS = 15_000;
+const MAX_REASON_CODES = 50;
+const MAX_IDENTIFIER_LENGTH = 200;
+const VERDICTS = new Set(["ALLOW", "ESCALATE", "BLOCK"]);
+/**
+ * Runs an existing production execution unchanged while asking an authority
+ * what it would have decided. The observation is failure-isolated, bounded,
+ * and never carries execution authority.
+ */
 export class ShadowPipeline {
     authority;
-    constructor(authority) {
+    audit;
+    timeoutMs;
+    clock;
+    constructor(authority, options = {}) {
         this.authority = authority;
+        if (authority.evaluationMode === "ENFORCEMENT") {
+            throw new Error("SHADOW_AUTHORITY_MUST_BE_OBSERVATIONAL");
+        }
+        if (options.timeoutMs !== undefined && !Number.isFinite(options.timeoutMs)) {
+            throw new Error("SHADOW_TIMEOUT_INVALID");
+        }
+        this.audit = options.audit;
+        this.timeoutMs = Math.min(Math.max(options.timeoutMs ?? DEFAULT_TIMEOUT_MS, 1), MAX_TIMEOUT_MS);
+        this.clock = options.clock ?? Date.now;
     }
-    async compare(captured, existingExecution) {
-        const [productionResult, hypotheticalDecision] = await Promise.all([
-            existingExecution(),
-            this.authority.evaluate(captured),
-        ]);
-        return { mode: "SHADOW", productionResult, hypotheticalDecision };
+    /**
+     * Invokes `existingExecution` exactly once and returns as soon as it settles.
+     * Its result or thrown error is preserved verbatim. The observation promise
+     * never rejects and never delays production.
+     */
+    async observe(captured, existingExecution, options = {}) {
+        const observation = this.evaluate(captured, options.signal);
+        let production;
+        try {
+            production = { status: "COMPLETED", result: await existingExecution() };
+        }
+        catch (error) {
+            production = { status: "FAILED", error };
+        }
+        return Object.freeze({ mode: "SHADOW", production: Object.freeze(production), observation });
+    }
+    /** `observe`, then wait for the bounded observation so both sides can be compared inline. */
+    async compare(captured, existingExecution, options = {}) {
+        const run = await this.observe(captured, existingExecution, options);
+        return Object.freeze({
+            mode: "SHADOW",
+            production: run.production,
+            observation: await run.observation,
+        });
+    }
+    evaluate(captured, signal) {
+        const startedAt = this.clock();
+        const settled = new Promise((resolve) => {
+            let done = false;
+            const finish = (classified) => {
+                if (done)
+                    return;
+                done = true;
+                clearTimeout(timer);
+                signal?.removeEventListener("abort", onAbort);
+                resolve(classified);
+            };
+            const onAbort = () => finish(ShadowPipeline.empty("ABORTED"));
+            const timer = setTimeout(() => finish(ShadowPipeline.empty("TIMED_OUT")), this.timeoutMs);
+            if (signal?.aborted === true) {
+                onAbort();
+                return;
+            }
+            signal?.addEventListener("abort", onAbort, { once: true });
+            // Promise.resolve().then isolates a synchronously throwing authority.
+            void Promise.resolve()
+                .then(async () => await this.authority.evaluate(captured))
+                .then((decision) => finish(ShadowPipeline.classify(captured, decision)), () => finish(ShadowPipeline.empty("UNAVAILABLE")));
+        });
+        return settled.then(async (classified) => {
+            const observation = Object.freeze({
+                mode: "SHADOW",
+                authority: "OBSERVATIONAL",
+                intentHash: captured.intentHash,
+                ...classified,
+                reasonCodes: Object.freeze([...classified.reasonCodes]),
+                durationMs: Math.max(0, this.clock() - startedAt),
+            });
+            await this.record(captured, observation);
+            return observation;
+        });
+    }
+    async record(captured, observation) {
+        if (this.audit === undefined)
+            return;
+        await this.audit.record({
+            eventType: "SHADOW_EVALUATED",
+            authority: "OBSERVATIONAL",
+            captured,
+            ...(observation.verdict === null ? {} : { verdict: observation.verdict }),
+            ...(observation.decisionId === null ? {} : { decisionId: observation.decisionId }),
+            ...(observation.dossierId === null ? {} : { dossierId: observation.dossierId }),
+            reasonCodes: [`SHADOW_${observation.status}`, ...observation.reasonCodes].slice(0, MAX_REASON_CODES),
+            durationMs: observation.durationMs,
+        });
+    }
+    static empty(status, reasonCodes = []) {
+        return {
+            status,
+            verdict: null,
+            decisionId: null,
+            dossierId: null,
+            reasonCodes,
+            grantDiscarded: false,
+        };
+    }
+    /** Validates a decision from any authority; the grant, if any, is discarded and reported. */
+    static classify(captured, decision) {
+        const candidate = decision;
+        if (candidate === null ||
+            typeof candidate !== "object" ||
+            typeof candidate.verdict !== "string" ||
+            !VERDICTS.has(candidate.verdict) ||
+            !ShadowPipeline.isBoundedIdentifier(candidate.decisionId) ||
+            !(candidate.dossierId === null || ShadowPipeline.isBoundedIdentifier(candidate.dossierId)) ||
+            !Array.isArray(candidate.reasonCodes) ||
+            candidate.reasonCodes.length > MAX_REASON_CODES ||
+            !candidate.reasonCodes.every((code) => ShadowPipeline.isBoundedIdentifier(code))) {
+            return ShadowPipeline.empty("INVALID", ["SHADOW_DECISION_MALFORMED"]);
+        }
+        if (candidate.intentHash !== captured.intentHash) {
+            return ShadowPipeline.empty("INVALID", ["SHADOW_BINDING_MISMATCH"]);
+        }
+        const grantDiscarded = candidate.authorization !== null && typeof candidate.authorization === "object";
+        if (candidate.failClosed === true) {
+            // The authority did not answer the policy question; report unavailability, not a verdict.
+            return {
+                status: "UNAVAILABLE",
+                verdict: null,
+                decisionId: candidate.decisionId,
+                dossierId: candidate.dossierId,
+                reasonCodes: [...candidate.reasonCodes],
+                grantDiscarded,
+            };
+        }
+        return {
+            status: "OBSERVED",
+            verdict: candidate.verdict,
+            decisionId: candidate.decisionId,
+            dossierId: candidate.dossierId,
+            reasonCodes: [...candidate.reasonCodes],
+            grantDiscarded,
+        };
+    }
+    static isBoundedIdentifier(value) {
+        if (typeof value !== "string" || value.length < 1 || value.length > MAX_IDENTIFIER_LENGTH) {
+            return false;
+        }
+        for (let index = 0; index < value.length; index += 1) {
+            const codeUnit = value.charCodeAt(index);
+            if (codeUnit <= 0x1f || codeUnit === 0x7f)
+                return false;
+        }
+        return true;
     }
 }
 //# sourceMappingURL=ShadowPipeline.js.map

package/dist/shadow/ShadowPipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"ShadowPipeline.js","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,cAAc;IACW;IAApC,YAAoC,SAA4B;QAA5B,cAAS,GAAT,SAAS,CAAmB;IAAG,CAAC;IAE7D,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,iBAAmD;QAEnD,MAAM,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,iBAAiB,EAAE;YACnB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;IACpE,CAAC;CACF"}
+{"version":3,"file":"ShadowPipeline.js","sourceRoot":"","sources":["../../src/shadow/ShadowPipeline.ts"],"names":[],"mappings":"AAiEA,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAO1E;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAMN;IALF,KAAK,CAA4B;IACjC,SAAS,CAAS;IAClB,KAAK,CAAe;IAErC,YACmB,SAA4B,EAC7C,UAAiC,EAAE;QADlB,cAAS,GAAT,SAAS,CAAmB;QAG7C,IAAI,SAAS,CAAC,cAAc,KAAK,aAAa,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,iBAAmD,EACnD,UAAgC,EAAE;QAElC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,UAA4C,CAAC;QACjD,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,iBAAiB,EAAE,EAAE,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,OAAO,CAClB,QAAwB,EACxB,iBAAmD,EACnD,UAAgC,EAAE;QAElC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,MAAM,GAAG,CAAC,WAAW;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,QAAwB,EAAE,MAAoB;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YAClD,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,UAAsB,EAAQ,EAAE;gBAC9C,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1F,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,sEAAsE;YACtE,KAAK,OAAO,CAAC,OAAO,EAAE;iBACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;iBACzD,IAAI,CACH,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EACjE,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAClD,CAAC;QACN,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACvC,MAAM,WAAW,GAAsB,MAAM,CAAC,MAAM,CAAC;gBACnD,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,eAAe;gBAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,GAAG,UAAU;gBACb,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;gBACvD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACzC,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE,WAA8B;QAC3E,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,kBAAkB;YAC7B,SAAS,EAAE,eAAe;YAC1B,QAAQ;YACR,GAAG,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;YACzE,GAAG,CAAC,WAAW,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC;YAClF,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;YAC/E,WAAW,EAAE,CAAC,UAAU,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,KAAK,CAC7E,CAAC,EACD,gBAAgB,CACjB;YACD,UAAU,EAAE,WAAW,CAAC,UAAU;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,MAA+B,EAAE,cAAwB,EAAE;QAC9E,OAAO;YACL,MAAM;YACN,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,WAAW;YACX,cAAc,EAAE,KAAK;SACtB,CAAC;IACJ,CAAC;IAED,6FAA6F;IACrF,MAAM,CAAC,QAAQ,CAAC,QAAwB,EAAE,QAAsB;QACtE,MAAM,SAAS,GAAG,QAAoD,CAAC;QACvE,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAChC,CAAC,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,IAAI,IAAI,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC1F,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC;YACrC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,gBAAgB;YAC/C,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAChF,CAAC;YACD,OAAO,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,cAAc,GAClB,SAAS,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,CAAC;QAClF,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAClC,0FAA0F;YAC1F,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC;gBACvC,cAAc;aACf,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC;YACvC,cAAc;SACf,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,KAAc;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/testing/Index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Local testing entry: loopback doubles for Decionis and Presence plus the
+ * development fixture primitives. Import from
+ * `@decionis/agent-safe-pipeline/testing`. Nothing here is production
+ * authority; the fixture authority refuses to construct under
+ * `NODE_ENV=production`, and the local servers bind only to loopback.
+ */
+export { FixtureAuthorizationVerifier, FixtureDecisionAuthority, createFixtureAuthorityPair, type FixtureAuthorityPair, type FixtureCommitRecord, type FixtureVerdictResolver, type UnsafeFixtureAuthorityOptions, } from "../decision/FixtureDecisionAuthority.js";
+export { InMemoryReplayStore } from "../execution/ReplayStore.js";
+export { LocalPresence, LOCAL_PRESENCE_API_KEY, readBody, type LocalAuthenticator, type LocalCeremonyResponse, type LocalPresenceOptions, type LocalPresenceRequestRecord, type LocalReceipt, type LocalReceiptBinding, type LocalReceiptVerification, type LocalVerificationRecord, type LocalVerificationStatus, } from "./LocalPresence.js";
+export { AUTONOMOUS_LIMIT_MINOR, CLAIM_ATTESTATION_TYPE, HUMAN_LIMIT_MINOR, LocalAuthority, LOCAL_AUTHORITY_API_KEY, LOCAL_AUTHORITY_ISSUER, LOCAL_AUTHORITY_JWKS_PATH, hashBinding, stableStringify, type LocalAuthorityOptions, type LocalClaimAttestationClaims, type LocalAuthorityPolicy, type LocalAuthorityRequestRecord, type LocalGrantRecord, type LocalManagedEscalationRecord, type LocalRouteOverride, } from "./LocalAuthority.js";
+//# sourceMappingURL=Index.d.ts.map

package/dist/testing/Index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Index.d.ts","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC"}

package/dist/testing/Index.js

@@ -0,0 +1,12 @@
+/**
+ * Local testing entry: loopback doubles for Decionis and Presence plus the
+ * development fixture primitives. Import from
+ * `@decionis/agent-safe-pipeline/testing`. Nothing here is production
+ * authority; the fixture authority refuses to construct under
+ * `NODE_ENV=production`, and the local servers bind only to loopback.
+ */
+export { FixtureAuthorizationVerifier, FixtureDecisionAuthority, createFixtureAuthorityPair, } from "../decision/FixtureDecisionAuthority.js";
+export { InMemoryReplayStore } from "../execution/ReplayStore.js";
+export { LocalPresence, LOCAL_PRESENCE_API_KEY, readBody, } from "./LocalPresence.js";
+export { AUTONOMOUS_LIMIT_MINOR, CLAIM_ATTESTATION_TYPE, HUMAN_LIMIT_MINOR, LocalAuthority, LOCAL_AUTHORITY_API_KEY, LOCAL_AUTHORITY_ISSUER, LOCAL_AUTHORITY_JWKS_PATH, hashBinding, stableStringify, } from "./LocalAuthority.js";
+//# sourceMappingURL=Index.js.map

package/dist/testing/Index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,GAK3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,GAUT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,GAQhB,MAAM,qBAAqB,CAAC"}

package/dist/testing/LocalAuthority.d.ts

@@ -0,0 +1,292 @@
+import { z } from "zod";
+import { type LocalPresence } from "./LocalPresence.js";
+export declare const LOCAL_AUTHORITY_API_KEY = "test-key";
+export declare const AUTONOMOUS_LIMIT_MINOR = 10000;
+export declare const HUMAN_LIMIT_MINOR = 100000;
+/** The issuer the fixture's grants and attestations name; a provider double checks it. */
+export declare const LOCAL_AUTHORITY_ISSUER = "synthetic-authority";
+/** Where the fixture publishes its attestation key, at the path Decionis documents. */
+export declare const LOCAL_AUTHORITY_JWKS_PATH = "/.well-known/decionis-execution-grant-jwks.json";
+export declare const CLAIM_ATTESTATION_TYPE = "decionis-claim-attestation+jwt";
+/** `ExecutionAuthorityRequest`: the binding plus hash, mode, evidence, and managed constraints. */
+declare const AuthorityRequestSchema: z.ZodObject<{
+    intent_hash: z.ZodString;
+    mode: z.ZodEnum<{
+        ENFORCEMENT: "ENFORCEMENT";
+        SHADOW: "SHADOW";
+    }>;
+    evidence: z.ZodOptional<z.ZodObject<{
+        humanApproval: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodLiteral<"presence">;
+            requestId: z.ZodString;
+            receiptDossierId: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    escalation: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodLiteral<"MANAGED">;
+        approver: z.ZodOptional<z.ZodObject<{
+            principal_id: z.ZodOptional<z.ZodString>;
+            role_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        verification_requirements: z.ZodOptional<z.ZodObject<{
+            methods: z.ZodArray<z.ZodEnum<{
+                WEBAUTHN: "WEBAUTHN";
+                ACTIVE_LIVENESS: "ACTIVE_LIVENESS";
+            }>>;
+            level: z.ZodOptional<z.ZodEnum<{
+                STANDARD: "STANDARD";
+                HIGH_CONFIDENCE: "HIGH_CONFIDENCE";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    protocol_version: z.ZodLiteral<"agent-safe.intent/1">;
+    tenant_id: z.ZodUUID;
+    intent_id: z.ZodUUID;
+    captured_at: z.ZodISODateTime;
+    expires_at: z.ZodISODateTime;
+    actor: z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodString;
+        runtime: z.ZodOptional<z.ZodString>;
+        trust_level: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    action: z.ZodObject<{
+        type: z.ZodString;
+        resource: z.ZodString;
+        parameters: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>;
+    context: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    downstream_target: z.ZodObject<{
+        system: z.ZodString;
+        environment: z.ZodOptional<z.ZodString>;
+        operation: z.ZodString;
+        endpoint: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    expected_effect_digest: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type LocalAuthorityRequest = z.infer<typeof AuthorityRequestSchema>;
+type Verdict = "ALLOW" | "ESCALATE" | "BLOCK";
+type ManagedStatus = "PENDING_PRESENCE" | "PRESENCE_REQUESTED" | "AWAITING_APPROVER" | "PRESENCE_VERIFIED" | "REAUTHORIZING" | "GRANT_READY" | "EXPIRED" | "REJECTED" | "BLOCKED" | "CANCELLED" | "FAILED";
+type LifecycleEntry = ManagedStatus | {
+    status: ManagedStatus;
+    reasonCodes?: string[];
+};
+type Decision = Record<string, unknown>;
+/** Verdict for an intent evaluated without evidence; evidence handling stays generic. */
+export type LocalAuthorityPolicy = (request: LocalAuthorityRequest) => Verdict;
+export interface LocalRouteOverride {
+    readonly status?: number;
+    readonly body?: unknown;
+    readonly transform?: (body: unknown) => unknown;
+    readonly delayMs?: number;
+    readonly truncateTo?: number;
+    readonly destroy?: boolean;
+}
+export type LocalAuthorityRoute = "enforce" | "status" | "claim" | "finalize";
+export interface LocalAuthorityRequestRecord {
+    readonly method: string;
+    readonly path: string;
+    readonly headers: Readonly<Record<string, string | null>>;
+    body: unknown;
+    recomputedHash: string | null;
+    response: {
+        readonly status: number | null;
+        readonly body: unknown;
+    } | null;
+    readonly at: string;
+}
+export interface LocalGrantRecord {
+    readonly jti: string;
+    readonly tenantId: string;
+    readonly actorId: string;
+    readonly action: string;
+    readonly audience: string;
+    readonly decisionId: string;
+    readonly dossierId: string;
+    readonly intentHash: string;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly nonce: string;
+    readonly bindingDigest: string;
+    /** The digest the authority bound over the canonical action parameters. */
+    readonly payloadDigest: string;
+    /** The expected-effect digest committed at enforce-and-bind; null when none was bound. */
+    readonly expectedEffectDigest: string | null;
+    /** Present for direct grants issued on client-supplied evidence; null for managed grants. */
+    readonly receiptDossierId: string | null;
+    claimed: boolean;
+    claimToken: string | null;
+    correlationId: string | null;
+    consumedBy: string | null;
+    finalized: "COMMITTED" | "FAILED" | "INDETERMINATE" | null;
+}
+export interface LocalManagedEscalationRecord {
+    readonly escalationId: string;
+    readonly request: LocalAuthorityRequest;
+    /** The `LocalPresence` request this escalation is orchestrated through, if any. */
+    readonly presenceRequestId: string | null;
+    /** Scripted statuses take precedence over orchestration; used to test client state handling. */
+    lifecycle: LifecycleEntry[] | null;
+    lookup: number;
+    status: ManagedStatus;
+    reasonCodes: string[];
+    finalDecision: Decision | null;
+    readonly initialDecision: Decision;
+}
+export interface LocalAuthorityOptions {
+    readonly apiKey?: string;
+    /** Verifies direct evidence and hosts managed escalations. */
+    readonly presence?: LocalPresence;
+    /** Legacy hook used when no `presence` is configured. */
+    readonly verifyReceipt?: (approval: {
+        readonly requestId: string;
+        readonly receiptDossierId: string;
+    }, intentHash: string) => boolean;
+    readonly policy?: LocalAuthorityPolicy;
+    /** Subject routed to for a managed escalation without an approver principal. */
+    readonly managedApproverId?: string;
+    /**
+     * API-key identities this deployment accepts as effect observers, mirroring
+     * `DECIONIS_TRUSTED_EFFECT_OBSERVER_API_KEY_IDS`. Empty by default, exactly as
+     * the hosted authority is by default, so `CONFIRMED` evidence is refused
+     * unless a test opts in. As in the hosted route, the allowlist is intersected
+     * with the caller's own authenticated identity — this double's `apiKey` — so
+     * naming any other id confirms nothing.
+     */
+    readonly trustedEffectObserverIds?: readonly string[];
+    readonly clock?: () => number;
+    /**
+     * Attach a verification envelope to every decision, as the hosted
+     * `evaluate-decision` does and `enforce-and-bind` may: a page URL under
+     * this double's own origin, so a test can see the link travel end to end.
+     */
+    readonly verificationLinks?: boolean;
+}
+/** The organization a provisioned synthetic workspace belongs to. */
+export declare const LOCAL_AUTHORITY_PROVISIONAL_ORG_ID = "00000000-0000-4000-8000-000000000008";
+/** What one claim attestation says, as the fixture signs it and a provider double reads it. */
+export interface LocalClaimAttestationClaims {
+    readonly iss: string;
+    readonly sub: string;
+    readonly org_id: string;
+    readonly dossier_id: string;
+    readonly decision_id: string;
+    readonly binding: {
+        readonly intent_hash: string;
+        readonly execution_payload_digest: string;
+        readonly execution_payload_canonicalization_profile: string;
+        readonly expected_effect_digest?: string;
+        readonly execution_nonce: string;
+        readonly execution_correlation_id: string;
+    };
+    readonly claim_token_digest: string;
+    readonly claim_validated_at: string;
+    readonly jti: string;
+    readonly iat: number;
+    readonly nbf: number;
+    readonly exp: number;
+}
+/**
+ * Independent canonicalization: keys sorted by UTF-16 code unit, values encoded
+ * with JSON.stringify semantics. This deliberately does not import the
+ * package's hasher so the two implementations check each other.
+ */
+export declare function stableStringify(value: unknown): string;
+export declare function hashBinding(binding: unknown): string;
+export declare class LocalAuthority {
+    /** Every request seen, oldest first, with bounded bodies and the response given. */
+    readonly requests: LocalAuthorityRequestRecord[];
+    /** Issued grants keyed by execution token. */
+    readonly grants: Map<string, LocalGrantRecord>;
+    /** Managed escalations keyed by their opaque identifier. */
+    readonly escalations: Map<string, LocalManagedEscalationRecord>;
+    private readonly apiKey;
+    private readonly presence;
+    private readonly legacyVerifyReceipt;
+    private readonly policy;
+    private readonly managedApproverId;
+    private readonly trustedEffectObserverIds;
+    private readonly clock;
+    private readonly attestationKey;
+    /** The `kid` the fixture's attestations name; a provider double looks it up in the JWKS. */
+    readonly attestationKeyId = "synthetic-exec-grant-1";
+    /**
+     * A drill knob: when set, the next claim binds a digest over parameters
+     * other than the ones captured, which is what a tampered or mismatched
+     * authority looks like from the executor's side, and what BEAP-L3-BND-01
+     * says the executor must refuse.
+     */
+    misbindNextPayloadDigest: boolean;
+    private readonly overrides;
+    private readonly managedByIntent;
+    private nextManagedLifecycle;
+    private decisions;
+    /** Every decision minted, by dossier id, for `GET /v1/protocol/dossiers/{id}`. */
+    private readonly dossiers;
+    private readonly verificationLinks;
+    private server;
+    private port;
+    constructor(options?: LocalAuthorityOptions);
+    /** The fixture's JWKS, as `GET /.well-known/decionis-execution-grant-jwks.json` serves it. */
+    get jwks(): {
+        readonly keys: readonly Record<string, unknown>[];
+    };
+    /**
+     * A compact JWS over the claim, signed the way Decionis signs one: EdDSA,
+     * the grant key, the attestation type in the protected header. Built with
+     * `node:crypto` alone so the fixture stays an independent implementation.
+     */
+    private attest;
+    get baseUrl(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /**
+     * Alters the next response on one route only. `transform` receives the
+     * computed body; `body` replaces it (an object or a raw string); `status`,
+     * `delayMs`, `truncateTo`, and `destroy` shape the transport behavior.
+     */
+    scriptOnce(route: LocalAuthorityRoute, override: LocalRouteOverride): void;
+    /** Statuses returned, in order, for the next managed escalation instead of orchestration. */
+    scriptNextManagedLifecycle(statuses: readonly LifecycleEntry[]): void;
+    private handle;
+    private enforceAndBind;
+    /** Keeps a minted decision for its dossier route, with the envelope when links are on. */
+    private remember;
+    /**
+     * The persisted record, shaped as `GET /v1/protocol/dossiers/{id}` returns
+     * it: a payload with the routing decision, the inputs and a proof bundle
+     * naming this double's key. The artifacts are not signed; the record says
+     * so in its issuer tier, and nothing here claims otherwise.
+     */
+    private dossierRecord;
+    /** Policy plus evidence handling: a valid receipt turns an escalation into an allow. */
+    private evaluate;
+    private verifyEvidence;
+    private baseDecision;
+    private grantDecision;
+    /** Opens a managed escalation: scripted, orchestrated through LocalPresence, or default-scripted. */
+    private openManaged;
+    /** Creates the Presence request the way Decionis does: bound structurally to the intent hash. */
+    private requestPresence;
+    private managedStatus;
+    private scripted;
+    /** Orchestrated state machine, mirroring Decionis's transitions against Presence. */
+    private advance;
+    private cancelManaged;
+    private claim;
+    private finalize;
+    /**
+     * The hosted route never trusts the allowlist alone: it returns at most the
+     * caller's own authenticated API-key identity, so a confirmed observation
+     * must name the identity that presented the credential. This double has one
+     * credential, so that credential is its identity.
+     */
+    private effectObserverIds;
+    /** Recomputes the hash independently and applies the contract's time rules. */
+    private assertBinding;
+    private respond;
+    private send;
+    private static isTerminal;
+}
+export {};
+//# sourceMappingURL=LocalAuthority.d.ts.map

package/dist/testing/LocalAuthority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAuthority.d.ts","sourceRoot":"","sources":["../../src/testing/LocalAuthority.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAElE,eAAO,MAAM,uBAAuB,aAAa,CAAC;AAClD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAQzC,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAC5D,uFAAuF;AACvF,eAAO,MAAM,yBAAyB,oDAAoD,CAAC;AAC3F,eAAO,MAAM,sBAAsB,mCAAmC,CAAC;AA2HvE,mGAAmG;AACnG,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AA2BH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE3E,KAAK,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAC9C,KAAK,aAAa,GACd,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,eAAe,GACf,aAAa,GACb,SAAS,GACT,UAAU,GACV,SAAS,GACT,WAAW,GACX,QAAQ,CAAC;AACb,KAAK,cAAc,GAAG,aAAa,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AACxF,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAOxC,yFAAyF;AACzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAE9E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1D,IAAI,EAAE,OAAO,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0FAA0F;IAC1F,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,6FAA6F;IAC7F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,WAAW,GAAG,QAAQ,GAAG,eAAe,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,gGAAgG;IAChG,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,CACvB,QAAQ,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,EAC3E,UAAU,EAAE,MAAM,KACf,OAAO,CAAC;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;;;;;OAOG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,qEAAqE;AACrE,eAAO,MAAM,kCAAkC,yCAAyC,CAAC;AAEzF,+FAA+F;AAC/F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;QAC1C,QAAQ,CAAC,0CAA0C,EAAE,MAAM,CAAC;QAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;QACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAStD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEpD;AAyBD,qBAAa,cAAc;IACzB,oFAAoF;IACpF,SAAgB,QAAQ,EAAE,2BAA2B,EAAE,CAAM;IAC7D,8CAA8C;IAC9C,SAAgB,MAAM,gCAAuC;IAC7D,4DAA4D;IAC5D,SAAgB,WAAW,4CAAmD;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAyC;IAC7E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAoB;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG7B;IACF,4FAA4F;IAC5F,SAAgB,gBAAgB,4BAA4B;IAC5D;;;;;OAKG;IACI,wBAAwB,UAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAKxB;IACF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmD;IACnF,OAAO,CAAC,oBAAoB,CAAiC;IAC7D,OAAO,CAAC,SAAS,CAAK;IACtB,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAGrB;IACJ,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IAC5C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAK;gBAEE,OAAO,GAAE,qBAA0B;IAiBtD,8FAA8F;IAC9F,IAAW,IAAI,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;KAAE,CAMvE;IAED;;;;OAIG;IACH,OAAO,CAAC,MAAM;IA+Cd,IAAW,OAAO,IAAI,MAAM,CAE3B;IAEY,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQlC;;;;OAIG;IACI,UAAU,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI;IAIjF,6FAA6F;IACtF,0BAA0B,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,IAAI;YAI9D,MAAM;IAuFpB,OAAO,CAAC,cAAc;IA2BtB,0FAA0F;IAC1F,OAAO,CAAC,QAAQ;IAkBhB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IA0CrB,wFAAwF;IACxF,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,YAAY;IA+BpB,OAAO,CAAC,aAAa;IA+CrB,qGAAqG;IACrG,OAAO,CAAC,WAAW;IAgDnB,iGAAiG;IACjG,OAAO,CAAC,eAAe;IAiDvB,OAAO,CAAC,aAAa;IA8CrB,OAAO,CAAC,QAAQ;IA8BhB,qFAAqF;IACrF,OAAO,CAAC,OAAO;IAqDf,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,KAAK;IA+Fb,OAAO,CAAC,QAAQ;IAiEhB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAIzB,+EAA+E;IAC/E,OAAO,CAAC,aAAa;YAiBP,OAAO;IAmCrB,OAAO,CAAC,IAAI;IAYZ,OAAO,CAAC,MAAM,CAAC,UAAU;CAU1B"}