@decionis/agent-safe-pipeline 0.1.3 → 0.2.0

package/dist/decision/CreateGate.js

@@ -0,0 +1,211 @@
+import { DecionisGrantVerifier, } from "../execution/AuthorizationVerifier.js";
+import { credentialsPath, readStoredCredentials, writeStoredCredentials, } from "../http/StoredCredentials.js";
+import { DecionisGate } from "./DecionisGate.js";
+import { fetchSignedDossier } from "../report/DossierReport.js";
+import { provisionWorkspace, } from "./Provision.js";
+import { ShadowGate } from "./ShadowGate.js";
+const DEFAULT_API_URL = "https://api.decionis.com";
+const TIMEOUT_PATTERN = /^\d{1,6}$/;
+/**
+ * Selects the gate from the environment.
+ *
+ * `DECIONIS_API_KEY` unset: returns `local` itself, the same authority and
+ * verifier objects, with no client constructed and no network call. A caller
+ * that sets nothing gets exactly what it gets today.
+ *
+ * `DECIONIS_API_KEY` set: `DecionisGate` runs beside `local` through
+ * `ShadowGate`, in `DECIONIS_MODE` (`SHADOW` by default, `ENFORCEMENT` on
+ * request). `DECIONIS_TENANT_ID` is then required, because Decionis binds
+ * every intent to the key's own organization and refuses any other tenant.
+ * `DECIONIS_API_URL`, `DECIONIS_TIMEOUT_MS` and `DECIONIS_ALLOW_INSECURE_LOOPBACK`
+ * configure the connection the way the trusted executor's do.
+ */
+export function createGate(options) {
+    const env = options.env ?? process.env;
+    const apiKey = env["DECIONIS_API_KEY"]?.trim();
+    if (apiKey === undefined || apiKey === "") {
+        return { ...options.local, mode: "LOCAL", tenantId: options.tenantId };
+    }
+    const mode = evaluationMode(env["DECIONIS_MODE"]);
+    const tenantId = env["DECIONIS_TENANT_ID"]?.trim();
+    if (tenantId === undefined || tenantId === "") {
+        throw new Error("DECIONIS_TENANT_ID_MISSING");
+    }
+    const timeoutMs = timeout(env["DECIONIS_TIMEOUT_MS"]);
+    const connection = {
+        baseUrl: env["DECIONIS_API_URL"]?.trim() || DEFAULT_API_URL,
+        apiKey,
+        allowInsecureLoopback: env["DECIONIS_ALLOW_INSECURE_LOOPBACK"]?.trim() === "true",
+        ...(timeoutMs === undefined ? {} : { timeoutMs }),
+        ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+    };
+    const hosted = new DecionisGate({
+        ...connection,
+        mode,
+        ...(options.source === undefined ? {} : { source: options.source }),
+    });
+    return {
+        mode,
+        tenantId,
+        authority: new ShadowGate(options.local.authority, hosted, mode),
+        // Only an ENFORCEMENT decision carries a grant Decionis will let a
+        // verifier claim; a SHADOW decision keeps the local verifier and grant.
+        verifier: mode === "ENFORCEMENT" ? new DecionisGrantVerifier(connection) : options.local.verifier,
+    };
+}
+function evaluationMode(raw) {
+    const value = raw?.trim().toUpperCase();
+    if (value === undefined || value === "" || value === "SHADOW")
+        return "SHADOW";
+    if (value === "ENFORCE" || value === "ENFORCEMENT")
+        return "ENFORCEMENT";
+    throw new Error("DECIONIS_MODE_INVALID");
+}
+function timeout(raw) {
+    const value = raw?.trim();
+    if (value === undefined || value === "")
+        return undefined;
+    if (!TIMEOUT_PATTERN.test(value))
+        throw new Error("DECIONIS_TIMEOUT_MS_INVALID");
+    return Number(value);
+}
+const HOSTED_VALUES = new Set(["1", "true", "yes", "on"]);
+/** Whether `DECIONIS_HOSTED` asks for the hosted gate. */
+export function hostedRequested(env) {
+    const value = env["DECIONIS_HOSTED"]?.trim().toLowerCase();
+    return value !== undefined && HOSTED_VALUES.has(value);
+}
+/**
+ * Where a hosted run's key comes from, in order: the environment, the
+ * credential this user keeps for this authority, and when there is none and
+ * `DECIONIS_HOSTED` asks, a free provisional workspace minted now, kept for
+ * the next run and named on standard error once. Null when nothing asks for
+ * the hosted path at all.
+ */
+export async function resolveHostedCredentials(options = {}) {
+    const env = options.env ?? process.env;
+    const endpoint = env["DECIONIS_API_URL"]?.trim() || DEFAULT_API_URL;
+    const keyInEnvironment = env["DECIONIS_API_KEY"]?.trim() ?? "";
+    if (keyInEnvironment !== "") {
+        const tenantId = env["DECIONIS_TENANT_ID"]?.trim();
+        if (tenantId === undefined || tenantId === "")
+            throw new Error("DECIONIS_TENANT_ID_MISSING");
+        return {
+            credentials: {
+                source: "environment",
+                tenantId,
+                endpoint,
+                path: null,
+                provisional: false,
+                claim: null,
+            },
+            apiKey: keyInEnvironment,
+            env,
+        };
+    }
+    if (!hostedRequested(env))
+        return null;
+    if (env["NODE_ENV"] === "production")
+        throw new Error("DECIONIS_HOSTED_REFUSED_IN_PRODUCTION");
+    const storeOptions = options.store === false
+        ? null
+        : {
+            env,
+            ...(options.store?.home === undefined ? {} : { home: options.store.home }),
+            ...(options.store?.files === undefined ? {} : { files: options.store.files }),
+        };
+    const stored = storeOptions === null ? null : readStoredCredentials(storeOptions);
+    if (stored !== null &&
+        stored.tenantId !== null &&
+        (stored.endpoint ?? DEFAULT_API_URL) === endpoint) {
+        return {
+            credentials: {
+                source: "stored",
+                tenantId: stored.tenantId,
+                endpoint,
+                path: storeOptions === null ? null : credentialsPath(storeOptions),
+                provisional: stored.provisional === true,
+                claim: null,
+            },
+            apiKey: stored.apiKey,
+            env: { ...env, DECIONIS_API_KEY: stored.apiKey, DECIONIS_TENANT_ID: stored.tenantId },
+        };
+    }
+    const workspace = await (options.provision ?? provisionWorkspace)({
+        baseUrl: endpoint,
+        allowInsecureLoopback: env["DECIONIS_ALLOW_INSECURE_LOOPBACK"]?.trim() === "true",
+        ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+        ...(options.source === undefined ? {} : { source: options.source }),
+        ...(options.source?.example === undefined
+            ? {}
+            : { agentName: `agent-safe-pipeline ${options.source.example}` }),
+    });
+    const path = storeOptions === null
+        ? null
+        : writeStoredCredentials(storeOptions, {
+            apiKey: workspace.rawKey,
+            tenantId: workspace.orgId,
+            endpoint,
+            provisional: true,
+        });
+    const notice = options.notice ??
+        ((line) => {
+            process.stderr.write(`${line}\n`);
+        });
+    const decisions = workspace.limits["governed_decisions_per_month"];
+    notice(`decionis: provisioned a free workspace ${workspace.orgId} (provisional, no account${typeof decisions === "number" ? `; ${String(decisions)} governed decisions a month` : ""})`);
+    notice(path === null
+        ? "decionis: the key was not stored; the next run mints another workspace"
+        : `decionis: key stored at ${path}; the next run reuses this workspace`);
+    const note = workspace.claim["note"];
+    if (typeof note === "string" && note.length <= 500)
+        notice(`decionis: ${note}`);
+    return {
+        credentials: {
+            source: "provisioned",
+            tenantId: workspace.orgId,
+            endpoint,
+            path,
+            provisional: true,
+            claim: workspace.claim,
+        },
+        apiKey: workspace.rawKey,
+        env: { ...env, DECIONIS_API_KEY: workspace.rawKey, DECIONIS_TENANT_ID: workspace.orgId },
+    };
+}
+/**
+ * The gate `createGate` selects, with one more way onto Decionis: a single
+ * variable. `DECIONIS_HOSTED=1` with no key means the key this user already
+ * keeps for this authority, and when there is none, a free provisional
+ * workspace minted now, kept for the next run, and named on standard error
+ * once. A key in the environment still wins, and no variable at all is
+ * still the local pair. A provisional key evaluates in `SHADOW` only:
+ * recorded beside the local verdict, with a signed dossier, never governing
+ * execution; an owned key set in the environment takes the mode asked for.
+ */
+export async function createHostedGate(options) {
+    const env = options.env ?? process.env;
+    const resolved = await resolveHostedCredentials(options);
+    if (resolved === null) {
+        return { ...createGate(options), credentials: null, fetchDossier: null };
+    }
+    const { credentials, apiKey } = resolved;
+    const gate = createGate({
+        ...options,
+        env: credentials.provisional ? { ...resolved.env, DECIONIS_MODE: "SHADOW" } : resolved.env,
+    });
+    return {
+        ...gate,
+        credentials,
+        fetchDossier: (dossierId) => fetchSignedDossier({
+            baseUrl: credentials.endpoint,
+            apiKey,
+            tenantId: credentials.tenantId,
+            dossierId,
+            allowInsecureLoopback: env["DECIONIS_ALLOW_INSECURE_LOOPBACK"]?.trim() === "true",
+            ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+            ...(options.source === undefined ? {} : { source: options.source }),
+        }),
+    };
+}
+//# sourceMappingURL=CreateGate.js.map

package/dist/decision/CreateGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateGate.js","sourceRoot":"","sources":["../../src/decision/CreateGate.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAEtB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAA6B,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EACL,kBAAkB,GAGnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAoC7C,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,eAAe;QAC3D,MAAM;QACN,qBAAqB,EAAE,GAAG,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM;QACjF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,GAAG,UAAU;QACb,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;QAChE,mEAAmE;QACnE,wEAAwE;QACxE,QAAQ,EACN,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IACzE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB;IACtC,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAgCD,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/E,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,GAAiD;IAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,OAAO,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AA0BD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;IACpE,MAAM,gBAAgB,GAAG,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7F,OAAO;YACL,WAAW,EAAE;gBACX,MAAM,EAAE,aAAa;gBACrB,QAAQ;gBACR,QAAQ;gBACR,IAAI,EAAE,IAAI;gBACV,WAAW,EAAE,KAAK;gBAClB,KAAK,EAAE,IAAI;aACZ;YACD,MAAM,EAAE,gBAAgB;YACxB,GAAG;SACJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAE/F,MAAM,YAAY,GAChB,OAAO,CAAC,KAAK,KAAK,KAAK;QACrB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC1E,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;SAC9E,CAAC;IACR,MAAM,MAAM,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAClF,IACE,MAAM,KAAK,IAAI;QACf,MAAM,CAAC,QAAQ,KAAK,IAAI;QACxB,CAAC,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,QAAQ,EACjD,CAAC;QACD,OAAO;YACL,WAAW,EAAE;gBACX,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ;gBACR,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC;gBAClE,WAAW,EAAE,MAAM,CAAC,WAAW,KAAK,IAAI;gBACxC,KAAK,EAAE,IAAI;aACZ;YACD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;QAChE,OAAO,EAAE,QAAQ;QACjB,qBAAqB,EAAE,GAAG,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM;QACjF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,uBAAuB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,IAAI,GACR,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,sBAAsB,CAAC,YAAY,EAAE;YACnC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,SAAS,CAAC,KAAK;YACzB,QAAQ;YACR,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACT,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,CAAC,CAAC,IAAY,EAAQ,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACnE,MAAM,CACJ,0CAA0C,SAAS,CAAC,KAAK,4BACvD,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC,CAAC,EACxF,GAAG,CACJ,CAAC;IACF,MAAM,CACJ,IAAI,KAAK,IAAI;QACX,CAAC,CAAC,wEAAwE;QAC1E,CAAC,CAAC,2BAA2B,IAAI,sCAAsC,CAC1E,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO;QACL,WAAW,EAAE;YACX,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,SAAS,CAAC,KAAK;YACzB,QAAQ;YACR,IAAI;YACJ,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,SAAS,CAAC,KAAK;SACvB;QACD,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,SAAS,CAAC,MAAM,EAAE,kBAAkB,EAAE,SAAS,CAAC,KAAK,EAAE;KACzF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,GAAG,OAAO;QACV,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG;KAC3F,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,WAAW;QACX,YAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAC1B,kBAAkB,CAAC;YACjB,OAAO,EAAE,WAAW,CAAC,QAAQ;YAC7B,MAAM;YACN,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,SAAS;YACT,qBAAqB,EAAE,GAAG,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM;YACjF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACpE,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/decision/DecionisGate.d.ts

@@ -1,18 +1,124 @@
+import { type Credential } from "../http/Credential.js";
+import { type ClientSource } from "../http/ClientIdentification.js";
 import type { CapturedIntent } from "../intent/ExecutionIntent.js";
-import { type DecisionAuthority, type DecisionEvidence, type GateDecision } from "./DecisionAuthority.js";
+import { type DecisionAuthority, type DecisionEvaluationMode, type DecisionEvaluationOptions, type DecisionEvidence, type GateDecision, type ManagedEscalationState } from "./DecisionAuthority.js";
+export type ManagedEscalationPendingStatus = "PENDING_PRESENCE" | "PRESENCE_REQUESTED" | "AWAITING_APPROVER" | "PRESENCE_VERIFIED" | "REAUTHORIZING";
+export type ManagedEscalationBlockedStatus = "EXPIRED" | "REJECTED" | "BLOCKED" | "CANCELLED";
+interface ManagedEscalationStatusBase {
+    readonly escalationId: string;
+    readonly intentId: string;
+    readonly actionHash: string;
+    readonly expiresAt: string;
+    readonly reasonCodes: readonly string[];
+}
+/** Strict, secret-free view of one Decionis-managed Presence escalation. */
+export type ManagedEscalationStatusResult = ManagedEscalationStatusBase & ({
+    readonly status: ManagedEscalationPendingStatus;
+    readonly outcome: "ESCALATE_PENDING";
+    readonly decision: null;
+} | {
+    readonly status: "GRANT_READY";
+    readonly outcome: "ALLOW";
+    readonly decision: GateDecision;
+} | {
+    readonly status: ManagedEscalationBlockedStatus;
+    readonly outcome: "BLOCK";
+    readonly decision: null;
+} | {
+    readonly status: "FAILED";
+    readonly outcome: "ERROR";
+    readonly decision: null;
+});
+export interface ManagedEscalationStatusOptions {
+    readonly signal?: AbortSignal;
+    /** Injectable epoch-millisecond clock for deterministic tests. */
+    readonly clock?: () => number;
+}
+export interface ManagedAuthorizationWaitOptions extends ManagedEscalationStatusOptions {
+    readonly maxAttempts?: number;
+    readonly initialDelayMs?: number;
+    readonly maxDelayMs?: number;
+    readonly sleep?: (delayMs: number, signal?: AbortSignal) => Promise<void>;
+    /** Injectable [0, 1] jitter source for deterministic tests. */
+    readonly random?: () => number;
+}
 export interface DecionisGateOptions {
     readonly baseUrl: string;
-    readonly apiKey: string;
+    /**
+     * The server-side Decionis credential, as a value or as a function read at
+     * the moment of use. A deployment whose credential rotates gives the
+     * function: the next request carries the new value, and a request already
+     * in flight keeps the one it started with, without anyone rebuilding this
+     * client and the executor around it.
+     */
+    readonly apiKey: Credential;
     readonly timeoutMs?: number;
     readonly fetch?: typeof fetch;
     readonly allowInsecureLoopback?: boolean;
+    /**
+     * `ENFORCEMENT` (default) asks Decionis for an executable decision.
+     * `SHADOW` asks Decionis to evaluate and record the exact intent without
+     * issuing a grant; the gate then never returns an authorization, even if a
+     * response carries one.
+     */
+    readonly mode?: DecisionEvaluationMode;
+    /**
+     * Where this integration came from, carried in the `User-Agent` of every
+     * call beside the package name and version. It is client identification
+     * for the authority's own accounting: not decision input, not part of the
+     * intent or its hash, and not part of the record the authority leaves.
+     */
+    readonly source?: ClientSource;
 }
 export declare class DecionisGate implements DecisionAuthority {
+    readonly evaluationMode: DecisionEvaluationMode;
     private readonly baseUrl;
     private readonly apiKey;
     private readonly timeoutMs;
     private readonly fetchImpl;
+    private readonly userAgent;
+    private readonly pendingAuthorizationWaits;
     constructor(options: DecionisGateOptions);
-    evaluate(captured: CapturedIntent, evidence?: DecisionEvidence): Promise<GateDecision>;
+    evaluate(captured: CapturedIntent, evidence?: DecisionEvidence, options?: DecisionEvaluationOptions): Promise<GateDecision>;
+    /** Performs one authenticated, read-only status lookup against Decionis. */
+    getManagedEscalationStatus(captured: CapturedIntent, escalation: ManagedEscalationState, options?: ManagedEscalationStatusOptions): Promise<ManagedEscalationStatusResult>;
+    /**
+     * Waits only on Decionis. Presence credentials, invitation locators, and
+     * receipt evidence never cross this client boundary in managed mode.
+     */
+    waitForAuthorization(captured: CapturedIntent, pendingDecision: GateDecision, options?: ManagedAuthorizationWaitOptions): Promise<GateDecision>;
+    private waitForAuthorizationInternal;
+    private decisionFromResponse;
+    private initialManagedState;
+    private statusResult;
+    private expectedStateFailure;
+    private statusBindingFailure;
+    private managedDeadline;
+    private waitBoundaryFailure;
+    private terminalWaitDecision;
+    private expiredWaitDecision;
+    private failedWaitDecision;
+    private failedManagedStatus;
+    private expiredManagedStatus;
+    private failedStatusFromBase;
+    private validEscalationRequest;
+    private static managedStateFromWire;
+    private static managedStateFromStatus;
+    private static managedStateFromStatusResult;
+    private static isPendingStatus;
+    private static validManagedStateSemantics;
+    private static waitConfiguration;
+    private static backoffDelay;
+    private static boundedSleep;
+    private static sleep;
+    private static clockNow;
+    private static signalAborted;
+    private static isBoundedIdentifier;
+    /**
+     * The contract returns an `ERROR` decision body on 409 and 503 so the
+     * refusal is evidence-bearing. Anything else fails closed generically.
+     */
+    private static failedResponse;
 }
+export {};
 //# sourceMappingURL=DecionisGate.d.ts.map

package/dist/decision/DecionisGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DecionisGate.d.ts","sourceRoot":"","sources":["../../src/decision/DecionisGate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AA4BhC,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAC1C;AAED,qBAAa,YAAa,YAAW,iBAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEtB,OAAO,EAAE,mBAAmB;IAUlC,QAAQ,CACnB,QAAQ,EAAE,cAAc,EACxB,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,YAAY,CAAC;CAmEzB"}
+{"version":3,"file":"DecionisGate.d.ts","sourceRoot":"","sources":["../../src/decision/DecionisGate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAEjB,KAAK,sBAAsB,EAE5B,MAAM,wBAAwB,CAAC;AAsJhC,MAAM,MAAM,8BAA8B,GACtC,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,eAAe,CAAC;AACpB,MAAM,MAAM,8BAA8B,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAE9F,UAAU,2BAA2B;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,4EAA4E;AAC5E,MAAM,MAAM,6BAA6B,GAAG,2BAA2B,GACrE,CACI;IACE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,CACJ,CAAC;AAEJ,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,+BAAgC,SAAQ,8BAA8B;IACrF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CAChC;AAgCD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,qBAAa,YAAa,YAAW,iBAAiB;IACpD,SAAgB,cAAc,EAAE,sBAAsB,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA4C;gBACnE,OAAO,EAAE,mBAAmB;IAgBlC,QAAQ,CACnB,QAAQ,EAAE,cAAc,EACxB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,YAAY,CAAC;IA+DxB,4EAA4E;IAC/D,0BAA0B,CACrC,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,sBAAsB,EAClC,OAAO,GAAE,8BAAmC,GAC3C,OAAO,CAAC,6BAA6B,CAAC;IA8FzC;;;OAGG;IACU,oBAAoB,CAC/B,QAAQ,EAAE,cAAc,EACxB,eAAe,EAAE,YAAY,EAC7B,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,YAAY,CAAC;YAiDV,4BAA4B;IAqH1C,OAAO,CAAC,oBAAoB;IAuE5B,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,YAAY;IAkEpB,OAAO,CAAC,oBAAoB;IAuB5B,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,mBAAmB;IAW3B,OAAO,CAAC,oBAAoB;IA4B5B,OAAO,CAAC,mBAAmB;IAsB3B,OAAO,CAAC,kBAAkB;IAuB1B,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,sBAAsB;IAiC9B,OAAO,CAAC,MAAM,CAAC,oBAAoB;IAanC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAWrC,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAa3C,OAAO,CAAC,MAAM,CAAC,eAAe;IAM9B,OAAO,CAAC,MAAM,CAAC,0BAA0B;IASzC,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAiChC,OAAO,CAAC,MAAM,CAAC,YAAY;mBAaN,YAAY;mBAiCZ,KAAK;IAkB1B,OAAO,CAAC,MAAM,CAAC,QAAQ;IASvB,OAAO,CAAC,MAAM,CAAC,aAAa;IAI5B,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAIlC;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;CAoB9B"}