@decionis/agent-safe-pipeline 0.4.0 → 0.5.0

package/dist/profile/McpToolProfile.d.ts

@@ -0,0 +1,129 @@
+import { z } from "zod";
+import { type JsonObject } from "../intent/JsonValue.js";
+/**
+ * `agent-safe.profile.mcp/1`: an MCP server's consequential tools described as
+ * data. Each tool names the action it becomes, the target it acts on (a
+ * template over its arguments), the argument that names its subject (the
+ * customer it is for), the arguments that decide what it does, and the
+ * arguments it accepts. A guard reads the file in place of a binding written
+ * in code, so governing a tool is a reviewable file, not code reached by name.
+ */
+export declare const MCP_PROFILE_CONTRACT = "agent-safe.profile.mcp/1";
+export declare const MCP_PROFILE_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/profiles/mcp/v1/schema.json";
+/** The most arguments a tool declares, and the most placeholders its target holds. */
+export declare const MAX_TOOL_ARGUMENTS = 64;
+export declare const MAX_TARGET_PLACEHOLDERS = 16;
+/** The types an argument may be declared as; a scalar one may fill a target or name a subject. */
+export declare const MCP_ARGUMENT_TYPES: readonly ["string", "number", "integer", "boolean", "array", "object"];
+export type McpArgumentType = (typeof MCP_ARGUMENT_TYPES)[number];
+export declare const McpArgumentSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        string: "string";
+        number: "number";
+        boolean: "boolean";
+        object: "object";
+        array: "array";
+        integer: "integer";
+    }>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    maxLength: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const McpToolSchema: z.ZodObject<{
+    tool: z.ZodString;
+    action: z.ZodString;
+    operation: z.ZodString;
+    summary: z.ZodString;
+    target: z.ZodString;
+    subject: z.ZodOptional<z.ZodString>;
+    consequential: z.ZodArray<z.ZodString>;
+    arguments: z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            string: "string";
+            number: "number";
+            boolean: "boolean";
+            object: "object";
+            array: "array";
+            integer: "integer";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        maxLength: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const McpProfileDefinitionSchema: z.ZodObject<{
+    profile: z.ZodLiteral<"agent-safe.profile.mcp/1">;
+    id: z.ZodString;
+    title: z.ZodString;
+    system: z.ZodString;
+    environment: z.ZodOptional<z.ZodString>;
+    tools: z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        action: z.ZodString;
+        operation: z.ZodString;
+        summary: z.ZodString;
+        target: z.ZodString;
+        subject: z.ZodOptional<z.ZodString>;
+        consequential: z.ZodArray<z.ZodString>;
+        arguments: z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                number: "number";
+                boolean: "boolean";
+                object: "object";
+                array: "array";
+                integer: "integer";
+            }>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            maxLength: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type McpArgumentDefinition = z.infer<typeof McpArgumentSchema>;
+export type McpToolDefinition = z.infer<typeof McpToolSchema>;
+export type McpProfileDefinition = z.infer<typeof McpProfileDefinitionSchema>;
+/** A subject check's answer for a tool call: `MATCH`, or why it is refused. */
+export type McpSubjectCheck = "MATCH" | "SUBJECT_ABSENT" | "SUBJECT_MISMATCH";
+export declare class McpProfileError extends Error {
+    readonly code: "MCP_PROFILE_INVALID";
+    readonly detail: string;
+    constructor(code: "MCP_PROFILE_INVALID", detail: string);
+}
+/**
+ * One MCP tool profile, validated. Every rule a schema cannot state is held
+ * here, at parse: a tool named twice, two tools on one action, a target that
+ * names an argument a call
+ * could leave out, a subject that is not a required identifier, a
+ * consequential argument the tool does not accept.
+ */
+export declare class McpToolProfile {
+    readonly definition: McpProfileDefinition;
+    private readonly byName;
+    private readonly schemas;
+    private constructor();
+    /** Validates a definition (closed schema, the rules above) and compiles it. */
+    static parse(value: unknown): McpToolProfile;
+    get id(): string;
+    /** Every tool the profile governs, in profile order. */
+    tools(): readonly string[];
+    tool(name: string): McpToolDefinition | null;
+    /**
+     * The arguments a tool accepts, as a closed validator: each declared one of
+     * its type, a required one present, any other refused. A number is finite;
+     * an integer is whole; an array or object holds JSON.
+     */
+    argumentsSchema(name: string): z.ZodType<JsonObject>;
+    /**
+     * The subject a call names, when its tool names a subject argument: a
+     * string or a finite number, as a string, of 1 to 200 characters; null when
+     * the argument holds neither. Undefined when the tool names no subject.
+     */
+    static subjectOf(tool: McpToolDefinition, args: JsonObject): string | null | undefined;
+    /** A call's subject against the session's, as `agent-safe.profile.api/1` checks a read's. */
+    static checkSubject(tool: McpToolDefinition, args: JsonObject, subject: string): McpSubjectCheck;
+    private static validator;
+    private static rules;
+    /** A target's placeholder names, by one linear scan; null when a brace is unbalanced or empty. */
+    private static placeholders;
+}
+/** The published JSON Schema of an MCP tool profile, generated from the validator above. */
+export declare function mcpProfileJsonSchema(): Record<string, unknown>;
+//# sourceMappingURL=McpToolProfile.d.ts.map

package/dist/profile/McpToolProfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpToolProfile.d.ts","sourceRoot":"","sources":["../../src/profile/McpToolProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAmB,KAAK,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,iGAC8D,CAAC;AAEjG,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,wEAOrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMlE,eAAO,MAAM,iBAAiB;;;;;;;;;;;kBAM5B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;kBAuBxB,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYrC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAE9E,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,qBAAqB;aAC3B,MAAM,EAAE,MAAM;gBADd,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,MAAM;CAKjC;AAOD;;;;;;GAMG;AACH,qBAAa,cAAc;aAIW,UAAU,EAAE,oBAAoB;IAHpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IAEpE,OAAO;IAiBP,+EAA+E;WACjE,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc;IAanD,IAAW,EAAE,IAAI,MAAM,CAEtB;IAED,wDAAwD;IACjD,KAAK,IAAI,SAAS,MAAM,EAAE;IAI1B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAInD;;;;OAIG;IACI,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAe3D;;;;OAIG;WACW,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS;IAc7F,6FAA6F;WAC/E,YAAY,CACxB,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,GACd,eAAe;IAOlB,OAAO,CAAC,MAAM,CAAC,SAAS;IAiBxB,OAAO,CAAC,MAAM,CAAC,KAAK;IAiCpB,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,YAAY;CAgB5B;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa9D"}

package/dist/profile/McpToolProfile.js

@@ -0,0 +1,270 @@
+import { z } from "zod";
+import { JsonValueSchema } from "../intent/JsonValue.js";
+/**
+ * `agent-safe.profile.mcp/1`: an MCP server's consequential tools described as
+ * data. Each tool names the action it becomes, the target it acts on (a
+ * template over its arguments), the argument that names its subject (the
+ * customer it is for), the arguments that decide what it does, and the
+ * arguments it accepts. A guard reads the file in place of a binding written
+ * in code, so governing a tool is a reviewable file, not code reached by name.
+ */
+export const MCP_PROFILE_CONTRACT = "agent-safe.profile.mcp/1";
+export const MCP_PROFILE_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/profiles/mcp/v1/schema.json";
+/** The most arguments a tool declares, and the most placeholders its target holds. */
+export const MAX_TOOL_ARGUMENTS = 64;
+export const MAX_TARGET_PLACEHOLDERS = 16;
+/** The types an argument may be declared as; a scalar one may fill a target or name a subject. */
+export const MCP_ARGUMENT_TYPES = [
+    "string",
+    "number",
+    "integer",
+    "boolean",
+    "array",
+    "object",
+];
+/** An argument's name starts with a letter, so no declared name can be `__proto__`. */
+const argumentName = z.string().regex(/^[a-z]\w{0,63}$/i);
+const text = (max) => z.string().trim().min(1).max(max);
+export const McpArgumentSchema = z.strictObject({
+    type: z.enum(MCP_ARGUMENT_TYPES),
+    /** Absent means optional: a call may leave the argument out. */
+    required: z.boolean().optional(),
+    /** The longest a string argument may be; a string only. */
+    maxLength: z.number().int().min(1).max(100_000).optional(),
+});
+export const McpToolSchema = z.strictObject({
+    /** The tool as the server publishes it. */
+    tool: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^[a-z0-9][\w.:/-]*$/i),
+    /** The intent's action type. */
+    action: z
+        .string()
+        .max(120)
+        .regex(/^[a-z][a-z0-9._:-]*$/),
+    /** The operation in the downstream system, for the intent's downstream target. */
+    operation: text(200),
+    summary: text(300),
+    /** `crm:customer:{customerId}`: every placeholder a required scalar argument. */
+    target: z.string().min(1).max(500),
+    /** The argument naming the tool's subject, when the tool acts for one party. */
+    subject: argumentName.optional(),
+    /** The arguments that decide what the tool does, for evidence and an approval screen. */
+    consequential: z.array(argumentName).max(MAX_TOOL_ARGUMENTS),
+    /** Every argument the tool accepts; any other is refused, never dropped. */
+    arguments: z.record(argumentName, McpArgumentSchema),
+});
+export const McpProfileDefinitionSchema = z.strictObject({
+    profile: z.literal(MCP_PROFILE_CONTRACT),
+    /** `<system>/<server>/<version>`, for example `crm/mcp/v1`. */
+    id: z
+        .string()
+        .regex(/^[a-z][a-z0-9]*\/[a-z][a-z0-9]*\/v\d+(\.\d+)?$/)
+        .max(120),
+    title: text(200),
+    /** The system the tools' effects land in: the intent's downstream system. */
+    system: text(200),
+    environment: text(200).optional(),
+    tools: z.array(McpToolSchema).min(1).max(200),
+});
+export class McpProfileError extends Error {
+    code;
+    detail;
+    constructor(code, detail) {
+        super(code);
+        this.code = code;
+        this.detail = detail;
+        this.name = "McpProfileError";
+    }
+}
+const SCALAR = new Set(["string", "number", "integer", "boolean"]);
+const SUBJECT_TYPES = new Set(["string", "number", "integer"]);
+/** The longest subject: an identifier, never a payload. */
+const MAX_SUBJECT_LENGTH = 200;
+/**
+ * One MCP tool profile, validated. Every rule a schema cannot state is held
+ * here, at parse: a tool named twice, two tools on one action, a target that
+ * names an argument a call
+ * could leave out, a subject that is not a required identifier, a
+ * consequential argument the tool does not accept.
+ */
+export class McpToolProfile {
+    definition;
+    byName;
+    schemas = new Map();
+    constructor(definition) {
+        this.definition = definition;
+        const byName = new Map();
+        const actions = new Set();
+        for (const tool of definition.tools) {
+            if (byName.has(tool.tool))
+                throw new McpProfileError("MCP_PROFILE_INVALID", `duplicate tool ${tool.tool}`);
+            // A grant authorizes an action, and the guard dispatches the one tool
+            // registered under it: two tools on one action would be ambiguous.
+            if (actions.has(tool.action))
+                throw new McpProfileError("MCP_PROFILE_INVALID", `tool ${tool.tool} repeats an action`);
+            actions.add(tool.action);
+            McpToolProfile.rules(tool);
+            byName.set(tool.tool, tool);
+        }
+        this.byName = byName;
+    }
+    /** Validates a definition (closed schema, the rules above) and compiles it. */
+    static parse(value) {
+        const parsed = McpProfileDefinitionSchema.safeParse(value);
+        if (!parsed.success)
+            throw new McpProfileError("MCP_PROFILE_INVALID", parsed.error.issues
+                .slice(0, 3)
+                .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
+                .join("; "));
+        return new McpToolProfile(parsed.data);
+    }
+    get id() {
+        return this.definition.id;
+    }
+    /** Every tool the profile governs, in profile order. */
+    tools() {
+        return this.definition.tools.map((tool) => tool.tool);
+    }
+    tool(name) {
+        return this.byName.get(name) ?? null;
+    }
+    /**
+     * The arguments a tool accepts, as a closed validator: each declared one of
+     * its type, a required one present, any other refused. A number is finite;
+     * an integer is whole; an array or object holds JSON.
+     */
+    argumentsSchema(name) {
+        const cached = this.schemas.get(name);
+        if (cached !== undefined)
+            return cached;
+        const tool = this.byName.get(name);
+        if (tool === undefined)
+            throw new McpProfileError("MCP_PROFILE_INVALID", `no tool ${name}`);
+        const shape = {};
+        for (const [argument, declared] of Object.entries(tool.arguments)) {
+            const base = McpToolProfile.validator(declared);
+            shape[argument] = declared.required === true ? base : base.optional();
+        }
+        const schema = z.strictObject(shape);
+        this.schemas.set(name, schema);
+        return schema;
+    }
+    /**
+     * The subject a call names, when its tool names a subject argument: a
+     * string or a finite number, as a string, of 1 to 200 characters; null when
+     * the argument holds neither. Undefined when the tool names no subject.
+     */
+    static subjectOf(tool, args) {
+        if (tool.subject === undefined)
+            return undefined;
+        const value = Object.hasOwn(args, tool.subject)
+            ? args[tool.subject]
+            : undefined;
+        const named = typeof value === "string"
+            ? value
+            : typeof value === "number" && Number.isFinite(value)
+                ? String(value)
+                : null;
+        return named === null || named.length === 0 || named.length > MAX_SUBJECT_LENGTH ? null : named;
+    }
+    /** A call's subject against the session's, as `agent-safe.profile.api/1` checks a read's. */
+    static checkSubject(tool, args, subject) {
+        const named = McpToolProfile.subjectOf(tool, args);
+        if (named === undefined)
+            return "MATCH";
+        if (named === null)
+            return "SUBJECT_ABSENT";
+        return named === subject ? "MATCH" : "SUBJECT_MISMATCH";
+    }
+    static validator(declared) {
+        switch (declared.type) {
+            case "string":
+                return declared.maxLength === undefined ? z.string() : z.string().max(declared.maxLength);
+            case "number":
+                return z.number().finite();
+            case "integer":
+                return z.number().int();
+            case "boolean":
+                return z.boolean();
+            case "array":
+                return z.array(JsonValueSchema);
+            case "object":
+                return z.record(z.string(), JsonValueSchema);
+        }
+    }
+    static rules(tool) {
+        const refuse = (detail) => {
+            throw new McpProfileError("MCP_PROFILE_INVALID", `tool ${tool.tool} ${detail}`);
+        };
+        const declared = Object.entries(tool.arguments);
+        if (declared.length > MAX_TOOL_ARGUMENTS)
+            refuse("declares too many arguments");
+        for (const [name, argument] of declared) {
+            if (argument.maxLength !== undefined && argument.type !== "string")
+                refuse(`bounds the length of ${name}, which is not a string`);
+        }
+        const required = (name, types) => {
+            const argument = tool.arguments[name];
+            return (Object.hasOwn(tool.arguments, name) &&
+                argument !== undefined &&
+                argument.required === true &&
+                types.has(argument.type));
+        };
+        const placeholders = McpToolProfile.placeholders(tool.target);
+        if (placeholders === null)
+            refuse("has a malformed target");
+        for (const name of placeholders ?? []) {
+            if (!required(name, SCALAR))
+                refuse(`fills its target from ${name}, not a required scalar`);
+        }
+        if (tool.subject !== undefined && !required(tool.subject, SUBJECT_TYPES))
+            refuse(`names ${tool.subject} as its subject, not a required string or number`);
+        if (new Set(tool.consequential).size !== tool.consequential.length)
+            refuse("names a consequential argument twice");
+        for (const name of tool.consequential) {
+            if (!Object.hasOwn(tool.arguments, name))
+                refuse(`names ${name} consequential, not accepted`);
+        }
+    }
+    /** A target's placeholder names, by one linear scan; null when a brace is unbalanced or empty. */
+    static placeholders(target) {
+        const names = [];
+        for (let at = 0; at < target.length; at += 1) {
+            const character = target[at];
+            if (character === "}")
+                return null;
+            if (character !== "{")
+                continue;
+            const close = target.indexOf("}", at + 1);
+            if (close === -1)
+                return null;
+            const name = target.slice(at + 1, close);
+            if (name.length === 0 || name.includes("{"))
+                return null;
+            names.push(name);
+            if (names.length > MAX_TARGET_PLACEHOLDERS)
+                return null;
+            at = close;
+        }
+        return names;
+    }
+}
+/** The published JSON Schema of an MCP tool profile, generated from the validator above. */
+export function mcpProfileJsonSchema() {
+    const generated = z.toJSONSchema(McpProfileDefinitionSchema, {
+        target: "draft-2020-12",
+        io: "input",
+    });
+    const schema = { ...generated };
+    delete schema["$schema"];
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: MCP_PROFILE_SCHEMA_ID,
+        title: MCP_PROFILE_CONTRACT,
+        ...schema,
+    };
+}
+//# sourceMappingURL=McpToolProfile.js.map

package/dist/profile/McpToolProfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpToolProfile.js","sourceRoot":"","sources":["../../src/profile/McpToolProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAmC,MAAM,wBAAwB,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAChC,8FAA8F,CAAC;AAEjG,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,kGAAkG;AAClG,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;CACA,CAAC;AAGX,uFAAuF;AACvF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAC1D,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAChC,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1C,2CAA2C;IAC3C,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,sBAAsB,CAAC;IAChC,gCAAgC;IAChC,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,sBAAsB,CAAC;IAChC,kFAAkF;IAClF,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC;IACpB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;IAClB,iFAAiF;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,gFAAgF;IAChF,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE;IAChC,yFAAyF;IACzF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC5D,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,YAAY,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACxC,+DAA+D;IAC/D,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CAAC,gDAAgD,CAAC;SACvD,GAAG,CAAC,GAAG,CAAC;IACX,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,6EAA6E;IAC7E,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;IACjB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC9C,CAAC,CAAC;AASH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IACA;IAFlB,YACkB,IAA2B,EAC3B,MAAc;QAE9B,KAAK,CAAC,IAAI,CAAC,CAAC;QAHI,SAAI,GAAJ,IAAI,CAAuB;QAC3B,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,MAAM,GAAiC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACjG,MAAM,aAAa,GAAiC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7F,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAIW;IAHnB,MAAM,CAAyC;IAC/C,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEpE,YAAoC,UAAgC;QAAhC,eAAU,GAAV,UAAU,CAAsB;QAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,sEAAsE;YACtE,mEAAmE;YACnE,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,QAAQ,IAAI,CAAC,IAAI,oBAAoB,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,+EAA+E;IACxE,MAAM,CAAC,KAAK,CAAC,KAAc;QAChC,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,MAAM,CAAC,KAAK,CAAC,MAAM;iBAChB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAW,EAAE;QACX,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5B,CAAC;IAED,wDAAwD;IACjD,KAAK;QACV,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAEM,IAAI,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACI,eAAe,CAAC,IAAY;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAC5F,MAAM,KAAK,GAA8B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAChD,KAAK,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,KAAK,CAAqC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,SAAS,CAAC,IAAuB,EAAE,IAAgB;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,KAAK,GAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;YACpE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GACT,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACnD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACf,CAAC,CAAC,IAAI,CAAC;QACb,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAClG,CAAC;IAED,6FAA6F;IACtF,MAAM,CAAC,YAAY,CACxB,IAAuB,EACvB,IAAgB,EAChB,OAAe;QAEf,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC5C,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,QAA+B;QACtD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC5F,KAAK,QAAQ;gBACX,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,SAAS;gBACZ,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC;YAC1B,KAAK,SAAS;gBACZ,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YACrB,KAAK,OAAO;gBACV,OAAO,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAClC,KAAK,QAAQ;gBACX,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,IAAuB;QAC1C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAS,EAAE;YACvC,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,QAAQ,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB;YAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;YACxC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAChE,MAAM,CAAC,wBAAwB,IAAI,yBAAyB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,KAAmC,EAAW,EAAE;YAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnC,QAAQ,KAAK,SAAS;gBACtB,QAAQ,CAAC,QAAQ,KAAK,IAAI;gBAC1B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,YAAY,KAAK,IAAI;YAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAAE,MAAM,CAAC,yBAAyB,IAAI,yBAAyB,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;YACtE,MAAM,CAAC,SAAS,IAAI,CAAC,OAAO,kDAAkD,CAAC,CAAC;QAClF,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM;YAChE,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBAAE,MAAM,CAAC,SAAS,IAAI,8BAA8B,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,kGAAkG;IAC1F,MAAM,CAAC,YAAY,CAAC,MAAc;QACxC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,SAAS,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACnC,IAAI,SAAS,KAAK,GAAG;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB;gBAAE,OAAO,IAAI,CAAC;YACxD,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB;IAClC,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,0BAA0B,EAAE;QAC3D,MAAM,EAAE,eAAe;QACvB,EAAE,EAAE,OAAO;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAA4B,EAAE,GAAG,SAAS,EAAE,CAAC;IACzD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,qBAAqB;QAC1B,KAAK,EAAE,oBAAoB;QAC3B,GAAG,MAAM;KACV,CAAC;AACJ,CAAC"}

package/dist/testing/Index.d.ts

@@ -8,6 +8,8 @@
 export { FixtureAuthorizationVerifier, FixtureDecisionAuthority, createFixtureAuthorityPair, type FixtureAuthorityPair, type FixtureCommitRecord, type FixtureVerdictResolver, type UnsafeFixtureAuthorityOptions, } from "../decision/FixtureDecisionAuthority.js";
 export { InMemoryReplayStore } from "../execution/ReplayStore.js";
 export { LocalPresence, LOCAL_PRESENCE_API_KEY, readBody, type LocalAuthenticator, type LocalCeremonyResponse, type LocalPresenceOptions, type LocalPresenceRequestRecord, type LocalReceipt, type LocalReceiptBinding, type LocalReceiptVerification, type LocalVerificationRecord, type LocalVerificationStatus, } from "./LocalPresence.js";
-export { AUTONOMOUS_LIMIT_MINOR, CLAIM_ATTESTATION_TYPE, EFFECT_RECEIPT_TYPE, HUMAN_LIMIT_MINOR, LocalAuthority, LOCAL_AUTHORITY_API_KEY, LOCAL_AUTHORITY_ISSUER, LOCAL_AUTHORITY_JWKS_PATH, hashBinding, stableStringify, type LocalAuthorityOptions, type LocalClaimAttestationClaims, type LocalEffectReceiptCode, type LocalEffectReceiptRecord, type LocalProviderKey, PROVIDER_KEY_PURPOSES, type LocalAuthorityPolicy, type LocalAuthorityPolicyInput, type LocalProviderKeyPurpose, type LocalAuthorityRequestRecord, type LocalGrantRecord, type LocalManagedEscalationRecord, type LocalRouteOverride, } from "./LocalAuthority.js";
+export { AUTONOMOUS_LIMIT_MINOR, CLAIM_ATTESTATION_TYPE, EFFECT_RECEIPT_TYPE, HUMAN_LIMIT_MINOR, LocalAuthority, LOCAL_AUTHORITY_API_KEY, LOCAL_AUTHORITY_ISSUER, LOCAL_AUTHORITY_JWKS_PATH, hashBinding, stableStringify, type LocalAllowanceDraw, type LocalAllowanceUsage, type LocalAuthorityOptions, type LocalClaimAttestationClaims, type LocalEffectReceiptCode, type LocalEffectReceiptRecord, type LocalProviderKey, PROVIDER_KEY_PURPOSES, type LocalAuthorityPolicy, type LocalAuthorityPolicyInput, type LocalProviderKeyPurpose, type LocalAuthorityRequestRecord, type LocalGrantRecord, type LocalManagedEscalationRecord, type LocalMaterialSignal, type LocalRouteOverride, } from "./LocalAuthority.js";
+export { LocalPlans } from "./LocalPlans.js";
+export { LocalAssumptionBreaches, type LocalAssumptionBreach, type LocalAssumptionBreachCitation, type LocalAssumptionBreachScope, type LocalAssumptionBreachTrigger, } from "./LocalAssumptionBreaches.js";
 export { SIGNED_SIGNAL_MAX_LIFETIME_SECONDS, SIGNED_SIGNAL_REFUSAL_CODES, SIGNED_SIGNAL_TYPE, mintSignedSignal, signedSignalFacts, verifySignedSignal, verifySignedSignals, type SignedSignalClaims, type SignedSignalCoverage, type SignedSignalFacts, type SignedSignalIntentView, type SignedSignalKey, type SignedSignalRefusalCode, type SignedSignalVerification, type VerifiedSignedSignal, } from "./SignedSignals.js";
 //# sourceMappingURL=Index.d.ts.map

package/dist/testing/Index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Index.d.ts","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"Index.d.ts","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,GACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GAClC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAC"}

package/dist/testing/Index.js

@@ -9,5 +9,7 @@ export { FixtureAuthorizationVerifier, FixtureDecisionAuthority, createFixtureAu
 export { InMemoryReplayStore } from "../execution/ReplayStore.js";
 export { LocalPresence, LOCAL_PRESENCE_API_KEY, readBody, } from "./LocalPresence.js";
 export { AUTONOMOUS_LIMIT_MINOR, CLAIM_ATTESTATION_TYPE, EFFECT_RECEIPT_TYPE, HUMAN_LIMIT_MINOR, LocalAuthority, LOCAL_AUTHORITY_API_KEY, LOCAL_AUTHORITY_ISSUER, LOCAL_AUTHORITY_JWKS_PATH, hashBinding, stableStringify, PROVIDER_KEY_PURPOSES, } from "./LocalAuthority.js";
+export { LocalPlans } from "./LocalPlans.js";
+export { LocalAssumptionBreaches, } from "./LocalAssumptionBreaches.js";
 export { SIGNED_SIGNAL_MAX_LIFETIME_SECONDS, SIGNED_SIGNAL_REFUSAL_CODES, SIGNED_SIGNAL_TYPE, mintSignedSignal, signedSignalFacts, verifySignedSignal, verifySignedSignals, } from "./SignedSignals.js";
 //# sourceMappingURL=Index.js.map

package/dist/testing/Index.js.map

@@ -1 +1 @@
-{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,GAK3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,GAUT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EAMf,qBAAqB,GAQtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GASpB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"Index.js","sourceRoot":"","sources":["../../src/testing/Index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,GAK3B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,QAAQ,GAUT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,WAAW,EACX,eAAe,EAQf,qBAAqB,GAStB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACL,uBAAuB,GAKxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GASpB,MAAM,oBAAoB,CAAC"}

package/dist/testing/LocalAssumptionBreaches.d.ts

@@ -0,0 +1,96 @@
+/**
+ * The hosted authority's assumption breaches, as `LocalAuthority` models them
+ * (Decionis `docs/architecture/assumption-breaches.md`): an observed outcome
+ * that contradicts what a grant was bound to holds that grant's scope, the
+ * action type at its target, until a governed release or recovery review
+ * cites it and every piece of its evidence.
+ *
+ * Hosted, the breach is a fact policy reads (`history.assumption_breach`) and
+ * the starter policy's rule ESCALATEs on it; this double has a policy hook
+ * instead of rules, so it applies that rule's effect itself: an autonomous
+ * ALLOW in a held scope becomes ESCALATE, and a grant issued autonomously
+ * fails at claim with `POLICY_STATE_CHANGED`, the code the hosted claim's
+ * policy re-run answers. An ALLOW a person approved is that person's
+ * decision and goes through, as it would under a policy whose approval rule
+ * sits above the hold.
+ */
+/** Why a breach opened. The double opens the two a finalization can. */
+export type LocalAssumptionBreachTrigger = "EFFECT_MISMATCH" | "EFFECT_RECEIPT_CONTRADICTION";
+/** Where a breach holds: the action type at one target, as the hosted scope names it. */
+export interface LocalAssumptionBreachScope {
+    readonly tenantId: string;
+    readonly actionType: string;
+    readonly system: string;
+    readonly environment: string;
+    readonly resource: string;
+}
+export interface LocalAssumptionBreach {
+    readonly breachId: string;
+    readonly trigger: LocalAssumptionBreachTrigger;
+    readonly scope: LocalAssumptionBreachScope;
+    readonly grantJti: string;
+    readonly dossierId: string;
+    /** What a clearance must cite, exactly. */
+    readonly evidenceIds: readonly string[];
+    status: "OPEN" | "CLEARED";
+}
+/** What a governed release or recovery review cites to clear a breach. */
+export interface LocalAssumptionBreachCitation {
+    readonly breachId: string;
+    readonly evidenceIds: readonly string[];
+}
+export declare class LocalAssumptionBreaches {
+    /** Every breach opened, oldest first. */
+    readonly all: LocalAssumptionBreach[];
+    private readonly subjects;
+    /** The scope of an intent: the hosted binding's target, environment defaulting to production. */
+    static scopeOf(request: {
+        readonly tenant_id: string;
+        readonly action: {
+            readonly type: string;
+            readonly resource: string;
+        };
+        readonly downstream_target: {
+            readonly system: string;
+            readonly environment?: string | undefined;
+        };
+    }): LocalAssumptionBreachScope;
+    /** The breaches still holding a scope. */
+    openIn(scope: LocalAssumptionBreachScope): readonly LocalAssumptionBreach[];
+    /** Remembers what a grant was issued for, so its finalization and its claim are scoped. */
+    granted(token: string, scope: LocalAssumptionBreachScope, autonomous: boolean): void;
+    /** Whether a claim of this grant is refused: an autonomous grant in a held scope. */
+    holdsClaim(token: string): boolean;
+    /**
+     * Opens a breach when a finalization contradicts its binding: a verified
+     * receipt that effected another effect, effected what the executor reports
+     * FAILED, or refused what it reports COMMITTED; or the executor's own
+     * observation of another effect. One per grant, whatever it is retried as.
+     */
+    finalized(input: {
+        readonly token: string;
+        readonly grantJti: string;
+        readonly dossierId: string;
+        readonly outcome: "COMMITTED" | "FAILED" | "INDETERMINATE";
+        readonly expectedEffectDigest: string | null;
+        readonly observedEffectDigest: string | null;
+        readonly evidenceDigest: string | null;
+        readonly receipt: {
+            readonly verified: boolean;
+            readonly token: string;
+            readonly effect_status: "EFFECTED" | "REFUSED" | "INDETERMINATE" | null;
+            readonly effect_digest: string | null;
+        } | null;
+    }): {
+        readonly breach_id: string;
+        readonly trigger: LocalAssumptionBreachTrigger;
+        readonly created: boolean;
+    } | null;
+    /**
+     * What a governed release or recovery review that cites the breaches does
+     * hosted: each must be open and cited with every evidence id it was opened
+     * on, or none clears.
+     */
+    clear(citations: readonly LocalAssumptionBreachCitation[]): void;
+}
+//# sourceMappingURL=LocalAssumptionBreaches.d.ts.map

package/dist/testing/LocalAssumptionBreaches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAssumptionBreaches.d.ts","sourceRoot":"","sources":["../../src/testing/LocalAssumptionBreaches.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AAEH,wEAAwE;AACxE,MAAM,MAAM,4BAA4B,GAAG,iBAAiB,GAAG,8BAA8B,CAAC;AAE9F,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AASD,qBAAa,uBAAuB;IAClC,yCAAyC;IACzC,SAAgB,GAAG,EAAE,qBAAqB,EAAE,CAAM;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D,iGAAiG;WACnF,OAAO,CAAC,OAAO,EAAE;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,QAAQ,CAAC,iBAAiB,EAAE;YAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC3C,CAAC;KACH,GAAG,0BAA0B;IAU9B,0CAA0C;IACnC,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,SAAS,qBAAqB,EAAE;IAKlF,2FAA2F;IACpF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI;IAI3F,qFAAqF;IAC9E,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAKzC;;;;;OAKG;IACI,SAAS,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC;QAC3D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QACvC,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAAC;YACxE,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;SACvC,GAAG,IAAI,CAAC;KACV,GAAG;QACF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;QAC/C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;KAC3B,GAAG,IAAI;IA4CR;;;;OAIG;IACI,KAAK,CAAC,SAAS,EAAE,SAAS,6BAA6B,EAAE,GAAG,IAAI;CAYxE"}