@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/adapters/aws.d.ts

@@ -0,0 +1,158 @@
+/**
+ * @typedef {object} AwsIamClient
+ * @property {(input: {UserName: string, PolicyArn: string}) => any} attachUserPolicy
+ * @property {(input: {UserName: string}) => any} createAccessKey
+ * @property {(input: {UserName: string}) => any} deleteUser
+ */
+/**
+ * @typedef {object} AwsEc2Client
+ * @property {(input: {GroupId: string, CidrIp: string, FromPort: number, ToPort: number, IpProtocol: string}) => any} authorizeSecurityGroupIngress
+ */
+/** @typedef {{ iam: AwsIamClient, ec2: AwsEc2Client }} AwsClient */
+export declare const AWS_ACTION_PACK: readonly (Readonly<{
+    id: "aws.iam.attach_policy";
+    label: "IAM attach policy";
+    action_type: "aws.iam.attach_policy";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Grants permissions. Privilege escalation deserves the two-person rule.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "aws.iam.create_access_key";
+    label: "IAM create access key";
+    action_type: "aws.iam.create_access_key";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Mints long-lived credentials. Bind the user to a named approval.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "aws.iam.delete_user";
+    label: "IAM delete user";
+    action_type: "aws.iam.delete_user";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Destroys an identity. Bind the target user.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "aws.ec2.authorize_ingress";
+    label: "Open security-group ingress";
+    action_type: "aws.ec2.authorize_ingress";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Opens the network. Bind group/CIDR/port so 0.0.0.0/0:22 cannot slip through.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const AWS_OPS: readonly string[];
+/** @param {object[]} extraActions */
+export declare function createAwsManifest(extraActions?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+/**
+ * Guard a high-blast-radius AWS mutation behind the gate.
+ * @param {object} gate    a gate built with createAwsManifest()
+ * @param {AwsClient} client  { iam: {attachUserPolicy, createAccessKey, deleteUser}, ec2: {authorizeSecurityGroupIngress} }
+ * @param {{ op: string, params?: object, receipt?: any }} args    { op, params, receipt }
+ * @throws Error{code:'EMILIA_RECEIPT_REQUIRED'} if refused — the call never reaches AWS
+ */
+export declare function guardAwsMutation(gate: any, client: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    AWS_ACTION_PACK: readonly (Readonly<{
+        id: "aws.iam.attach_policy";
+        label: "IAM attach policy";
+        action_type: "aws.iam.attach_policy";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Grants permissions. Privilege escalation deserves the two-person rule.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "aws.iam.create_access_key";
+        label: "IAM create access key";
+        action_type: "aws.iam.create_access_key";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Mints long-lived credentials. Bind the user to a named approval.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "aws.iam.delete_user";
+        label: "IAM delete user";
+        action_type: "aws.iam.delete_user";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Destroys an identity. Bind the target user.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "aws.ec2.authorize_ingress";
+        label: "Open security-group ingress";
+        action_type: "aws.ec2.authorize_ingress";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Opens the network. Bind group/CIDR/port so 0.0.0.0/0:22 cannot slip through.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    AWS_OPS: readonly string[];
+    createAwsManifest: typeof createAwsManifest;
+    guardAwsMutation: typeof guardAwsMutation;
+};
+export default _default;
+//# sourceMappingURL=aws.d.ts.map

package/dist/adapters/aws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.d.ts","sourceRoot":"","sources":["../../src/adapters/aws.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH;;;GAGG;AACH,oEAAoE;AAEpE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA6B1B,CAAC;AA2DH,eAAO,MAAM,OAAO,mBAAc,CAAC;AAEnC,qCAAqC;AACrC,wBAAgB,iBAAiB,CAAC,YAAY,UAAK;;;EAElD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAED,wBAAiF"}

package/dist/adapters/aws.js

@@ -0,0 +1,136 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — AWS System-of-Record adapter (IAM + network).
+ *
+ * "Install this before your agent can change cloud permissions or open the
+ * network." Wraps the high-blast-radius AWS operations — attach IAM policy,
+ * create access key, delete user, and open a security-group ingress — so they
+ * never reach AWS without a valid, sufficiently-assured, non-replayed receipt
+ * bound to THIS principal/policy/group. Privilege and network changes default
+ * to quorum (the two-person rule).
+ *
+ *   import { IAMClient, EC2Client } from '@aws-sdk/...';
+ *   import { createGate } from '@emilia-protocol/gate';
+ *   import { createAwsManifest, guardAwsMutation } from '@emilia-protocol/gate/adapters/aws';
+ *
+ *   const gate = createGate({ manifest: createAwsManifest(), trustedKeys: [ISSUER], store: sharedConsumptionStore });
+ *   // client: { iam: { attachUserPolicy, createAccessKey, deleteUser }, ec2: { authorizeSecurityGroupIngress } }
+ *   await guardAwsMutation(gate, client, {
+ *     op: 'iam.attach_policy', params: { user: 'svc-bot', policy_arn: 'arn:aws:iam::aws:policy/AdministratorAccess' }, receipt,
+ *   });
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+/**
+ * @typedef {object} AwsIamClient
+ * @property {(input: {UserName: string, PolicyArn: string}) => any} attachUserPolicy
+ * @property {(input: {UserName: string}) => any} createAccessKey
+ * @property {(input: {UserName: string}) => any} deleteUser
+ */
+/**
+ * @typedef {object} AwsEc2Client
+ * @property {(input: {GroupId: string, CidrIp: string, FromPort: number, ToPort: number, IpProtocol: string}) => any} authorizeSecurityGroupIngress
+ */
+/** @typedef {{ iam: AwsIamClient, ec2: AwsEc2Client }} AwsClient */
+export const AWS_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'aws.iam.attach_policy', label: 'IAM attach policy', action_type: 'aws.iam.attach_policy',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'aws', tool: 'attach_user_policy' },
+        why: 'Grants permissions. Privilege escalation deserves the two-person rule.',
+        execution_binding: { required_fields: ['action_type', 'user', 'policy_arn'] },
+    }),
+    Object.freeze({
+        id: 'aws.iam.create_access_key', label: 'IAM create access key', action_type: 'aws.iam.create_access_key',
+        risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'aws', tool: 'create_access_key' },
+        why: 'Mints long-lived credentials. Bind the user to a named approval.',
+        execution_binding: { required_fields: ['action_type', 'user'] },
+    }),
+    Object.freeze({
+        id: 'aws.iam.delete_user', label: 'IAM delete user', action_type: 'aws.iam.delete_user',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'aws', tool: 'delete_user' },
+        why: 'Destroys an identity. Bind the target user.',
+        execution_binding: { required_fields: ['action_type', 'user'] },
+    }),
+    Object.freeze({
+        id: 'aws.ec2.authorize_ingress', label: 'Open security-group ingress', action_type: 'aws.ec2.authorize_ingress',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'aws', tool: 'authorize_security_group_ingress' },
+        why: 'Opens the network. Bind group/CIDR/port so 0.0.0.0/0:22 cannot slip through.',
+        execution_binding: { required_fields: ['action_type', 'group_id', 'cidr', 'protocol', 'from_port', 'to_port'] },
+    }),
+]);
+const OPS = {
+    'iam.attach_policy': {
+        selector: { protocol: 'aws', tool: 'attach_user_policy' },
+        /** @param {{user: string, policy_arn: string}} p */
+        observed: (p) => ({ action_type: 'aws.iam.attach_policy', user: p.user, policy_arn: p.policy_arn }),
+        /**
+         * @param {AwsClient} client
+         * @param {{user: string, policy_arn: string}} p
+         */
+        perform: (client, p) => client.iam.attachUserPolicy({ UserName: p.user, PolicyArn: p.policy_arn }),
+    },
+    'iam.create_access_key': {
+        selector: { protocol: 'aws', tool: 'create_access_key' },
+        /** @param {{user: string}} p */
+        observed: (p) => ({ action_type: 'aws.iam.create_access_key', user: p.user }),
+        /**
+         * @param {AwsClient} client
+         * @param {{user: string}} p
+         */
+        perform: (client, p) => client.iam.createAccessKey({ UserName: p.user }),
+    },
+    'iam.delete_user': {
+        selector: { protocol: 'aws', tool: 'delete_user' },
+        /** @param {{user: string}} p */
+        observed: (p) => ({ action_type: 'aws.iam.delete_user', user: p.user }),
+        /**
+         * @param {AwsClient} client
+         * @param {{user: string}} p
+         */
+        perform: (client, p) => client.iam.deleteUser({ UserName: p.user }),
+    },
+    'ec2.authorize_ingress': {
+        selector: { protocol: 'aws', tool: 'authorize_security_group_ingress' },
+        /** @param {{group_id: string, cidr: string, protocol?: string, from_port: number, to_port?: number}} p */
+        observed: (p) => ({
+            action_type: 'aws.ec2.authorize_ingress',
+            group_id: p.group_id,
+            cidr: p.cidr,
+            protocol: p.protocol ?? 'tcp',
+            from_port: p.from_port,
+            to_port: p.to_port ?? p.from_port,
+        }),
+        /**
+         * @param {AwsClient} client
+         * @param {{group_id: string, cidr: string, protocol: string, from_port: number, to_port: number}} p
+         */
+        perform: (client, p) => client.ec2.authorizeSecurityGroupIngress({
+            GroupId: p.group_id,
+            CidrIp: p.cidr,
+            FromPort: p.from_port,
+            ToPort: p.to_port,
+            IpProtocol: p.protocol,
+        }),
+    },
+};
+const adapter = createAdapter({ system: 'aws', ops: OPS });
+export const AWS_OPS = adapter.OPS;
+/** @param {object[]} extraActions */
+export function createAwsManifest(extraActions = []) {
+    return manifestFromPack(AWS_ACTION_PACK, extraActions);
+}
+/**
+ * Guard a high-blast-radius AWS mutation behind the gate.
+ * @param {object} gate    a gate built with createAwsManifest()
+ * @param {AwsClient} client  { iam: {attachUserPolicy, createAccessKey, deleteUser}, ec2: {authorizeSecurityGroupIngress} }
+ * @param {{ op: string, params?: object, receipt?: any }} args    { op, params, receipt }
+ * @throws Error{code:'EMILIA_RECEIPT_REQUIRED'} if refused — the call never reaches AWS
+ */
+export function guardAwsMutation(gate, client, args) {
+    return adapter.guard(gate, client, /** @type {{ op: any, params: any, receipt: any }} */ (args));
+}
+export default { AWS_ACTION_PACK, AWS_OPS, createAwsManifest, guardAwsMutation };
+//# sourceMappingURL=aws.js.map

package/dist/adapters/aws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws.js","sourceRoot":"","sources":["../../src/adapters/aws.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;GAKG;AACH;;;GAGG;AACH,oEAAoE;AAEpE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uBAAuB;QAC7F,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACtD,GAAG,EAAE,wEAAwE;QAC7E,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;KAC9E,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,2BAA2B;QACzG,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACrD,GAAG,EAAE,kEAAkE;QACvE,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;KAChE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB;QACvF,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE;QAC/C,GAAG,EAAE,6CAA6C;QAClD,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;KAChE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,2BAA2B,EAAE,KAAK,EAAE,6BAA6B,EAAE,WAAW,EAAE,2BAA2B;QAC/G,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,kCAAkC,EAAE;QACpE,GAAG,EAAE,8EAA8E;QACnF,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE;KAChH,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,mBAAmB,EAAE;QACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACzD,oDAAoD;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;QACnG;;;WAGG;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;KACnG;IACD,uBAAuB,EAAE;QACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACxD,gCAAgC;QAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E;;;WAGG;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACzE;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE;QAClD,gCAAgC;QAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE;;;WAGG;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACpE;IACD,uBAAuB,EAAE;QACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,kCAAkC,EAAE;QACvE,0GAA0G;QAC1G,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,WAAW,EAAE,2BAA2B;YACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS;SAClC,CAAC;QACF;;;WAGG;QACH,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAC/D,OAAO,EAAE,CAAC,CAAC,QAAQ;YACnB,MAAM,EAAE,CAAC,CAAC,IAAI;YACd,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,UAAU,EAAE,CAAC,CAAC,QAAQ;SACvB,CAAC;KACH;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;AAEnC,qCAAqC;AACrC,MAAM,UAAU,iBAAiB,CAAC,YAAY,GAAG,EAAE;IACjD,OAAO,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;IACjD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,qDAAqD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/adapters/cloudflare.d.ts

@@ -0,0 +1,116 @@
+/**
+ * @typedef {object} CloudflareClient
+ * @property {(input: {zone: string, recordId: string}) => any} deleteDnsRecord
+ * @property {(input: {zone: string}) => any} deleteZone
+ * @property {(input: {zone: string, ruleId: string, enabled: boolean}) => any} setFirewallRule
+ */
+export declare const CLOUDFLARE_ACTION_PACK: readonly (Readonly<{
+    id: "cloudflare.dns.delete";
+    label: "Delete DNS record";
+    action_type: "cloudflare.dns.delete";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Removing DNS can take a service offline or enable takeover. Bind zone+record.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "cloudflare.zone.delete";
+    label: "Delete zone";
+    action_type: "cloudflare.zone.delete";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Deletes an entire zone. Quorum.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "cloudflare.firewall.disable";
+    label: "Disable firewall rule";
+    action_type: "cloudflare.firewall.disable";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Disabling WAF/firewall opens the perimeter. Quorum + bind zone+rule.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const CLOUDFLARE_OPS: readonly string[];
+/** @param {object[]} extra */
+export declare function createCloudflareManifest(extra?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+export declare function guardCloudflareMutation(gate: any, client: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    CLOUDFLARE_ACTION_PACK: readonly (Readonly<{
+        id: "cloudflare.dns.delete";
+        label: "Delete DNS record";
+        action_type: "cloudflare.dns.delete";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Removing DNS can take a service offline or enable takeover. Bind zone+record.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "cloudflare.zone.delete";
+        label: "Delete zone";
+        action_type: "cloudflare.zone.delete";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Deletes an entire zone. Quorum.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "cloudflare.firewall.disable";
+        label: "Disable firewall rule";
+        action_type: "cloudflare.firewall.disable";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Disabling WAF/firewall opens the perimeter. Quorum + bind zone+rule.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    CLOUDFLARE_OPS: readonly string[];
+    createCloudflareManifest: typeof createCloudflareManifest;
+    guardCloudflareMutation: typeof guardCloudflareMutation;
+};
+export default _default;
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/adapters/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsBjC,CAAC;AAoCH,eAAO,MAAM,cAAc,mBAAc,CAAC;AAC1C,8BAA8B;AAC9B,wBAAgB,wBAAwB,CAAC,KAAK,UAAK;;;EAA6D;AAChH,wBAAgB,uBAAuB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACzG,wBAA6G"}

package/dist/adapters/cloudflare.js

@@ -0,0 +1,75 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Cloudflare System-of-Record adapter.
+ * Guards DNS record delete, zone delete, and WAF/firewall disable so they never
+ * reach Cloudflare without a receipt bound to THIS zone. Client injected.
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+/**
+ * @typedef {object} CloudflareClient
+ * @property {(input: {zone: string, recordId: string}) => any} deleteDnsRecord
+ * @property {(input: {zone: string}) => any} deleteZone
+ * @property {(input: {zone: string, ruleId: string, enabled: boolean}) => any} setFirewallRule
+ */
+export const CLOUDFLARE_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'cloudflare.dns.delete', label: 'Delete DNS record', action_type: 'cloudflare.dns.delete',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'cloudflare', tool: 'delete_dns_record' },
+        why: 'Removing DNS can take a service offline or enable takeover. Bind zone+record.',
+        execution_binding: { required_fields: ['action_type', 'zone', 'record_id'] },
+    }),
+    Object.freeze({
+        id: 'cloudflare.zone.delete', label: 'Delete zone', action_type: 'cloudflare.zone.delete',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'cloudflare', tool: 'delete_zone' },
+        why: 'Deletes an entire zone. Quorum.',
+        execution_binding: { required_fields: ['action_type', 'zone'] },
+    }),
+    Object.freeze({
+        id: 'cloudflare.firewall.disable', label: 'Disable firewall rule', action_type: 'cloudflare.firewall.disable',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'cloudflare', tool: 'set_firewall_rule' },
+        why: 'Disabling WAF/firewall opens the perimeter. Quorum + bind zone+rule.',
+        execution_binding: { required_fields: ['action_type', 'zone', 'rule_id'] },
+    }),
+]);
+const OPS = {
+    'dns.delete': {
+        selector: { protocol: 'cloudflare', tool: 'delete_dns_record' },
+        /** @param {{zone: string, record_id: string}} p */
+        observed: (p) => ({ action_type: 'cloudflare.dns.delete', zone: p.zone, record_id: p.record_id }),
+        /**
+         * @param {CloudflareClient} c
+         * @param {{zone: string, record_id: string}} p
+         */
+        perform: (c, p) => c.deleteDnsRecord({ zone: p.zone, recordId: p.record_id }),
+    },
+    'zone.delete': {
+        selector: { protocol: 'cloudflare', tool: 'delete_zone' },
+        /** @param {{zone: string}} p */
+        observed: (p) => ({ action_type: 'cloudflare.zone.delete', zone: p.zone }),
+        /**
+         * @param {CloudflareClient} c
+         * @param {{zone: string}} p
+         */
+        perform: (c, p) => c.deleteZone({ zone: p.zone }),
+    },
+    'firewall.disable': {
+        selector: { protocol: 'cloudflare', tool: 'set_firewall_rule' },
+        /** @param {{zone: string, rule_id: string}} p */
+        observed: (p) => ({ action_type: 'cloudflare.firewall.disable', zone: p.zone, rule_id: p.rule_id }),
+        /**
+         * @param {CloudflareClient} c
+         * @param {{zone: string, rule_id: string}} p
+         */
+        perform: (c, p) => c.setFirewallRule({ zone: p.zone, ruleId: p.rule_id, enabled: false }),
+    },
+};
+const adapter = createAdapter({ system: 'cloudflare', ops: OPS });
+export const CLOUDFLARE_OPS = adapter.OPS;
+/** @param {object[]} extra */
+export function createCloudflareManifest(extra = []) { return manifestFromPack(CLOUDFLARE_ACTION_PACK, extra); }
+export function guardCloudflareMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { CLOUDFLARE_ACTION_PACK, CLOUDFLARE_OPS, createCloudflareManifest, guardCloudflareMutation };
+//# sourceMappingURL=cloudflare.js.map

package/dist/adapters/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/adapters/cloudflare.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,uBAAuB;QAC7F,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE;QAC5D,GAAG,EAAE,+EAA+E;QACpF,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;KAC7E,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,wBAAwB,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,wBAAwB;QACzF,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QACtD,GAAG,EAAE,iCAAiC;QACtC,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE;KAChE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,6BAA6B,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,6BAA6B;QAC7G,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE;QAC5D,GAAG,EAAE,sEAAsE;QAC3E,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;KAC3E,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,YAAY,EAAE;QACZ,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE;QAC/D,mDAAmD;QACnD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACjG;;;WAGG;QACH,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;KAC9E;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QACzD,gCAAgC;QAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E;;;WAGG;QACH,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KAClD;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE;QAC/D,iDAAiD;QACjD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACnG;;;WAGG;QACH,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;KAC1F;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC;AAC1C,8BAA8B;AAC9B,MAAM,UAAU,wBAAwB,CAAC,KAAK,GAAG,EAAE,IAAI,OAAO,gBAAgB,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/adapters/gcp.d.ts

@@ -0,0 +1,139 @@
+export declare const GCP_ACTION_PACK: readonly (Readonly<{
+    id: "gcp.iam.set_policy";
+    label: "GCP IAM set policy";
+    action_type: "gcp.iam.set_policy";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Grants cloud permissions. Bind resource+member+role; quorum.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "gcp.sa_key.create";
+    label: "GCP service-account key create";
+    action_type: "gcp.sa_key.create";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Mints long-lived cloud credentials. Bind the service account.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "gcp.project.delete";
+    label: "GCP project delete";
+    action_type: "gcp.project.delete";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Deletes an entire project. Quorum.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "gcp.storage.bucket_delete";
+    label: "GCP bucket delete";
+    action_type: "gcp.storage.bucket_delete";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Destroys a storage bucket and its objects. Bind the bucket.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const GCP_OPS: readonly string[];
+export declare function createGcpManifest(extraActions?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+export declare function guardGcpMutation(gate: any, client: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    GCP_ACTION_PACK: readonly (Readonly<{
+        id: "gcp.iam.set_policy";
+        label: "GCP IAM set policy";
+        action_type: "gcp.iam.set_policy";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Grants cloud permissions. Bind resource+member+role; quorum.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "gcp.sa_key.create";
+        label: "GCP service-account key create";
+        action_type: "gcp.sa_key.create";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Mints long-lived cloud credentials. Bind the service account.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "gcp.project.delete";
+        label: "GCP project delete";
+        action_type: "gcp.project.delete";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Deletes an entire project. Quorum.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "gcp.storage.bucket_delete";
+        label: "GCP bucket delete";
+        action_type: "gcp.storage.bucket_delete";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Destroys a storage bucket and its objects. Bind the bucket.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    GCP_OPS: readonly string[];
+    createGcpManifest: typeof createGcpManifest;
+    guardGcpMutation: typeof guardGcpMutation;
+};
+export default _default;
+//# sourceMappingURL=gcp.d.ts.map

package/dist/adapters/gcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp.d.ts","sourceRoot":"","sources":["../../src/adapters/gcp.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA6B1B,CAAC;AA0BH,eAAO,MAAM,OAAO,mBAAc,CAAC;AACnC,wBAAgB,iBAAiB,CAAC,YAAY,UAAK;;;EAA6D;AAChH,wBAAgB,gBAAgB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAClG,wBAAiF"}