@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/adapters/k8s.js

@@ -0,0 +1,69 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Kubernetes System-of-Record adapter.
+ *
+ * "Install this before your agent can touch the cluster." Guards the operations
+ * that take a cluster down or hand it away — namespace delete, workload delete,
+ * RBAC binding, secret delete — so they never reach the API server without a
+ * receipt bound to THIS namespace/resource. Client is injected (a @kubernetes/
+ * client-node wrapper or compatible).
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+export const K8S_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'k8s.namespace.delete', label: 'Delete namespace', action_type: 'k8s.namespace.delete',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'k8s', tool: 'delete_namespace' },
+        why: 'Deletes an entire namespace and everything in it. Quorum.',
+        execution_binding: { required_fields: ['action_type', 'namespace'] },
+    }),
+    Object.freeze({
+        id: 'k8s.workload.delete', label: 'Delete workload', action_type: 'k8s.workload.delete',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'k8s', tool: 'delete_workload' },
+        why: 'Deletes a deployment/statefulset/job. Bind namespace+kind+name.',
+        execution_binding: { required_fields: ['action_type', 'namespace', 'kind', 'name'] },
+    }),
+    Object.freeze({
+        id: 'k8s.rbac.bind', label: 'RBAC binding', action_type: 'k8s.rbac.bind',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'k8s', tool: 'create_role_binding' },
+        why: 'Grants cluster permissions. Privilege change → two-person rule.',
+        execution_binding: { required_fields: ['action_type', 'subject', 'role', 'namespace'] },
+    }),
+    Object.freeze({
+        id: 'k8s.secret.delete', label: 'Delete secret', action_type: 'k8s.secret.delete',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'k8s', tool: 'delete_secret' },
+        why: 'Destroys a secret. Bind namespace+name.',
+        execution_binding: { required_fields: ['action_type', 'namespace', 'name'] },
+    }),
+]);
+const OPS = {
+    'namespace.delete': {
+        selector: { protocol: 'k8s', tool: 'delete_namespace' },
+        observed: (p) => ({ action_type: 'k8s.namespace.delete', namespace: p.namespace }),
+        perform: (c, p) => c.deleteNamespace({ namespace: p.namespace }),
+    },
+    'workload.delete': {
+        selector: { protocol: 'k8s', tool: 'delete_workload' },
+        observed: (p) => ({ action_type: 'k8s.workload.delete', namespace: p.namespace, kind: p.kind, name: p.name }),
+        perform: (c, p) => c.deleteWorkload({ namespace: p.namespace, kind: p.kind, name: p.name }),
+    },
+    'rbac.bind': {
+        selector: { protocol: 'k8s', tool: 'create_role_binding' },
+        observed: (p) => ({ action_type: 'k8s.rbac.bind', subject: p.subject, role: p.role, namespace: p.namespace }),
+        perform: (c, p) => c.createRoleBinding({ subject: p.subject, role: p.role, namespace: p.namespace }),
+    },
+    'secret.delete': {
+        selector: { protocol: 'k8s', tool: 'delete_secret' },
+        observed: (p) => ({ action_type: 'k8s.secret.delete', namespace: p.namespace, name: p.name }),
+        perform: (c, p) => c.deleteSecret({ namespace: p.namespace, name: p.name }),
+    },
+};
+const adapter = createAdapter({ system: 'k8s', ops: OPS });
+export const K8S_OPS = adapter.OPS;
+export function createK8sManifest(extraActions = []) { return manifestFromPack(K8S_ACTION_PACK, extraActions); }
+export function guardK8sMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { K8S_ACTION_PACK, K8S_OPS, createK8sManifest, guardK8sMutation };
+//# sourceMappingURL=k8s.js.map

package/dist/adapters/k8s.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s.js","sourceRoot":"","sources":["../../src/adapters/k8s.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,sBAAsB;QAC1F,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE;QACpD,GAAG,EAAE,2DAA2D;QAChE,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE;KACrE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB;QACvF,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE;QACnD,GAAG,EAAE,iEAAiE;QACtE,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;KACrF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe;QACxE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE;QACvD,GAAG,EAAE,iEAAiE;QACtE,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;KACxF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB;QACjF,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE;QACjD,GAAG,EAAE,yCAAyC;QAC9C,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;KAC7E,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,kBAAkB,EAAE;QAClB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAClF,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;KACjE;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE;QACtD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7G,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KAC5F;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE;QAC1D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7G,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;KACrG;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7F,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KAC5E;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;AACnC,MAAM,UAAU,iBAAiB,CAAC,YAAY,GAAG,EAAE,IAAI,OAAO,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAClG,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/adapters/linear.d.ts

@@ -0,0 +1,109 @@
+export declare const LINEAR_ACTION_PACK: readonly (Readonly<{
+    id: "linear.issue.delete";
+    label: "Delete issue";
+    action_type: "linear.issue.delete";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Destroys an issue. Bind the issue id.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "linear.issue.bulk_delete";
+    label: "Bulk delete issues";
+    action_type: "linear.issue.bulk_delete";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Mass-destroys issues. Bind the exact query.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "linear.team.delete";
+    label: "Delete team";
+    action_type: "linear.team.delete";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Deletes a team and its issues. Quorum.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const LINEAR_OPS: readonly string[];
+export declare function createLinearManifest(extra?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+export declare function guardLinearMutation(gate: any, client: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    LINEAR_ACTION_PACK: readonly (Readonly<{
+        id: "linear.issue.delete";
+        label: "Delete issue";
+        action_type: "linear.issue.delete";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Destroys an issue. Bind the issue id.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "linear.issue.bulk_delete";
+        label: "Bulk delete issues";
+        action_type: "linear.issue.bulk_delete";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Mass-destroys issues. Bind the exact query.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "linear.team.delete";
+        label: "Delete team";
+        action_type: "linear.team.delete";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Deletes a team and its issues. Quorum.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    LINEAR_OPS: readonly string[];
+    createLinearManifest: typeof createLinearManifest;
+    guardLinearMutation: typeof guardLinearMutation;
+};
+export default _default;
+//# sourceMappingURL=linear.d.ts.map

package/dist/adapters/linear.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.d.ts","sourceRoot":"","sources":["../../src/adapters/linear.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsB7B,CAAC;AAsBH,eAAO,MAAM,UAAU,mBAAc,CAAC;AACtC,wBAAgB,oBAAoB,CAAC,KAAK,UAAK;;;EAAyD;AACxG,wBAAgB,mBAAmB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACrG,wBAA6F"}

package/dist/adapters/linear.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Linear System-of-Record adapter.
+ * Guards issue deletion, bulk delete, and team deletion so they never reach
+ * Linear without a receipt bound to THIS resource. Client injected.
+ */
+import { createAdapter, manifestFromPack, hashCanonical } from './_kit.js';
+export const LINEAR_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'linear.issue.delete', label: 'Delete issue', action_type: 'linear.issue.delete',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'linear', tool: 'delete_issue' },
+        why: 'Destroys an issue. Bind the issue id.',
+        execution_binding: { required_fields: ['action_type', 'issue_id'] },
+    }),
+    Object.freeze({
+        id: 'linear.issue.bulk_delete', label: 'Bulk delete issues', action_type: 'linear.issue.bulk_delete',
+        risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'linear', tool: 'bulk_delete_issues' },
+        why: 'Mass-destroys issues. Bind the exact query.',
+        execution_binding: { required_fields: ['action_type', 'team', 'query_hash'] },
+    }),
+    Object.freeze({
+        id: 'linear.team.delete', label: 'Delete team', action_type: 'linear.team.delete',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'linear', tool: 'delete_team' },
+        why: 'Deletes a team and its issues. Quorum.',
+        execution_binding: { required_fields: ['action_type', 'team_id'] },
+    }),
+]);
+const OPS = {
+    'issue.delete': {
+        selector: { protocol: 'linear', tool: 'delete_issue' },
+        observed: (p) => ({ action_type: 'linear.issue.delete', issue_id: p.issue_id }),
+        perform: (c, p) => c.deleteIssue({ issueId: p.issue_id }),
+    },
+    'issue.bulk_delete': {
+        selector: { protocol: 'linear', tool: 'bulk_delete_issues' },
+        observed: (p) => ({ action_type: 'linear.issue.bulk_delete', team: p.team, query_hash: hashCanonical(String(p.query || '').trim()) }),
+        actuator: (p, observed) => ({ ...observed, query: p.query }),
+        perform: (c, p) => c.bulkDeleteIssues({ team: p.team, query: p.query }),
+    },
+    'team.delete': {
+        selector: { protocol: 'linear', tool: 'delete_team' },
+        observed: (p) => ({ action_type: 'linear.team.delete', team_id: p.team_id }),
+        perform: (c, p) => c.deleteTeam({ teamId: p.team_id }),
+    },
+};
+const adapter = createAdapter({ system: 'linear', ops: OPS });
+export const LINEAR_OPS = adapter.OPS;
+export function createLinearManifest(extra = []) { return manifestFromPack(LINEAR_ACTION_PACK, extra); }
+export function guardLinearMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { LINEAR_ACTION_PACK, LINEAR_OPS, createLinearManifest, guardLinearMutation };
+//# sourceMappingURL=linear.js.map

package/dist/adapters/linear.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.js","sourceRoot":"","sources":["../../src/adapters/linear.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB;QACpF,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;QACnD,GAAG,EAAE,uCAAuC;QAC5C,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE;KACpE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,0BAA0B;QACpG,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACzD,GAAG,EAAE,6CAA6C;QAClD,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;KAC9E,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB;QACjF,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;QAClD,GAAG,EAAE,wCAAwC;QAC7C,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE;KACnE,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,cAAc,EAAE;QACd,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;QACtD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/E,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC1D;IACD,mBAAmB,EAAE;QACnB,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC5D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACrI,QAAQ,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;KACxE;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;QACrD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5E,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACvD;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;AACtC,MAAM,UAAU,oBAAoB,CAAC,KAAK,GAAG,EAAE,IAAI,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACxG,MAAM,UAAU,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACrG,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/adapters/salesforce.d.ts

@@ -0,0 +1,109 @@
+export declare const SALESFORCE_ACTION_PACK: readonly (Readonly<{
+    id: "salesforce.records.bulk_delete";
+    label: "Bulk delete records";
+    action_type: "salesforce.records.bulk_delete";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Mass-destroys CRM records. Bind object + the exact SOQL.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "salesforce.data.export";
+    label: "Bulk data export";
+    action_type: "salesforce.data.export";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Exfiltrates CRM data. Bind object + recipient.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "salesforce.permission_set.assign";
+    label: "Assign permission set";
+    action_type: "salesforce.permission_set.assign";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Grants privileges. Quorum + bind user + permission set.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const SALESFORCE_OPS: readonly string[];
+export declare function createSalesforceManifest(extra?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+export declare function guardSalesforceMutation(gate: any, client: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    SALESFORCE_ACTION_PACK: readonly (Readonly<{
+        id: "salesforce.records.bulk_delete";
+        label: "Bulk delete records";
+        action_type: "salesforce.records.bulk_delete";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Mass-destroys CRM records. Bind object + the exact SOQL.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "salesforce.data.export";
+        label: "Bulk data export";
+        action_type: "salesforce.data.export";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Exfiltrates CRM data. Bind object + recipient.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "salesforce.permission_set.assign";
+        label: "Assign permission set";
+        action_type: "salesforce.permission_set.assign";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Grants privileges. Quorum + bind user + permission set.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    SALESFORCE_OPS: readonly string[];
+    createSalesforceManifest: typeof createSalesforceManifest;
+    guardSalesforceMutation: typeof guardSalesforceMutation;
+};
+export default _default;
+//# sourceMappingURL=salesforce.d.ts.map

package/dist/adapters/salesforce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"salesforce.d.ts","sourceRoot":"","sources":["../../src/adapters/salesforce.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsBjC,CAAC;AAsBH,eAAO,MAAM,cAAc,mBAAc,CAAC;AAC1C,wBAAgB,wBAAwB,CAAC,KAAK,UAAK;;;EAA6D;AAChH,wBAAgB,uBAAuB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACzG,wBAA6G"}

package/dist/adapters/salesforce.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Salesforce System-of-Record adapter.
+ * Guards bulk record delete, data export, and permission-set assignment so they
+ * never reach Salesforce without a receipt bound to THIS object. Client injected.
+ */
+import { createAdapter, manifestFromPack, hashCanonical } from './_kit.js';
+export const SALESFORCE_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'salesforce.records.bulk_delete', label: 'Bulk delete records', action_type: 'salesforce.records.bulk_delete',
+        risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'salesforce', tool: 'bulk_delete' },
+        why: 'Mass-destroys CRM records. Bind object + the exact SOQL.',
+        execution_binding: { required_fields: ['action_type', 'object', 'soql_hash'] },
+    }),
+    Object.freeze({
+        id: 'salesforce.data.export', label: 'Bulk data export', action_type: 'salesforce.data.export',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'salesforce', tool: 'export' },
+        why: 'Exfiltrates CRM data. Bind object + recipient.',
+        execution_binding: { required_fields: ['action_type', 'object', 'recipient'] },
+    }),
+    Object.freeze({
+        id: 'salesforce.permission_set.assign', label: 'Assign permission set', action_type: 'salesforce.permission_set.assign',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'salesforce', tool: 'assign_permission_set' },
+        why: 'Grants privileges. Quorum + bind user + permission set.',
+        execution_binding: { required_fields: ['action_type', 'user', 'permission_set'] },
+    }),
+]);
+const OPS = {
+    'records.bulk_delete': {
+        selector: { protocol: 'salesforce', tool: 'bulk_delete' },
+        observed: (p) => ({ action_type: 'salesforce.records.bulk_delete', object: p.object, soql_hash: hashCanonical(String(p.soql || '').trim()) }),
+        actuator: (p, observed) => ({ ...observed, soql: p.soql }),
+        perform: (c, p) => c.bulkDelete({ object: p.object, soql: p.soql }),
+    },
+    'data.export': {
+        selector: { protocol: 'salesforce', tool: 'export' },
+        observed: (p) => ({ action_type: 'salesforce.data.export', object: p.object, recipient: p.recipient }),
+        perform: (c, p) => c.export({ object: p.object, recipient: p.recipient }),
+    },
+    'permission_set.assign': {
+        selector: { protocol: 'salesforce', tool: 'assign_permission_set' },
+        observed: (p) => ({ action_type: 'salesforce.permission_set.assign', user: p.user, permission_set: p.permission_set }),
+        perform: (c, p) => c.assignPermissionSet({ user: p.user, permissionSet: p.permission_set }),
+    },
+};
+const adapter = createAdapter({ system: 'salesforce', ops: OPS });
+export const SALESFORCE_OPS = adapter.OPS;
+export function createSalesforceManifest(extra = []) { return manifestFromPack(SALESFORCE_ACTION_PACK, extra); }
+export function guardSalesforceMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { SALESFORCE_ACTION_PACK, SALESFORCE_OPS, createSalesforceManifest, guardSalesforceMutation };
+//# sourceMappingURL=salesforce.js.map

package/dist/adapters/salesforce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salesforce.js","sourceRoot":"","sources":["../../src/adapters/salesforce.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,gCAAgC,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,gCAAgC;QACjH,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QACtD,GAAG,EAAE,0DAA0D;QAC/D,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;KAC/E,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,wBAAwB,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB;QAC9F,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjD,GAAG,EAAE,gDAAgD;QACrD,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE;KAC/E,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,kCAAkC,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,kCAAkC;QACvH,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,uBAAuB,EAAE;QAChE,GAAG,EAAE,yDAAyD;QAC9D,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE;KAClF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,qBAAqB,EAAE;QACrB,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE;QACzD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7I,QAAQ,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACpE;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACtG,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;KAC1E;IACD,uBAAuB,EAAE;QACvB,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,uBAAuB,EAAE;QACnE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;QACtH,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC;KAC5F;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC;AAC1C,MAAM,UAAU,wBAAwB,CAAC,KAAK,GAAG,EAAE,IAAI,OAAO,gBAAgB,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAChH,MAAM,UAAU,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/adapters/stripe.d.ts

@@ -0,0 +1,116 @@
+export declare const STRIPE_ACTION_PACK: readonly (Readonly<{
+    id: "stripe.payout.create";
+    label: "Stripe payout";
+    action_type: "stripe.payout.create";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Moves money out. Bind amount/currency/destination to a named human approval.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "stripe.refund.create";
+    label: "Stripe refund";
+    action_type: "stripe.refund.create";
+    risk: "high";
+    receipt_required: true;
+    assurance_class: "class_a";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Returns funds. Bind the payment and amount so a refund cannot be silently inflated.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}> | Readonly<{
+    id: "stripe.bank_account.change";
+    label: "Stripe payout-destination change";
+    action_type: "stripe.bank_account.change";
+    risk: "critical";
+    receipt_required: true;
+    assurance_class: "quorum";
+    match: {
+        protocol: string;
+        tool: string;
+    };
+    why: "Changes WHERE future money flows. Quorum: the classic redirect-the-payouts attack.";
+    execution_binding: {
+        required_fields: string[];
+    };
+}>)[];
+export declare const STRIPE_OPS: readonly string[];
+export declare function createStripeManifest(extraActions?: never[]): {
+    '@version': string;
+    actions: any[];
+};
+/**
+ * Guard a destructive Stripe mutation behind the gate.
+ * @param {object} gate    a gate built with createStripeManifest()
+ * @param {object} stripe  a Stripe-like client (the official `stripe` SDK or compatible)
+ * @param {object} args    { op:'payout.create'|'refund.create'|'bank_account.change', params, receipt }
+ * @throws Error{code:'EMILIA_RECEIPT_REQUIRED'} if refused — the call never reaches Stripe
+ */
+export declare function guardStripeMutation(gate: any, stripe: any, args: any): Promise<{
+    result: any;
+    reliance: any;
+    execution: any;
+}>;
+declare const _default: {
+    STRIPE_ACTION_PACK: readonly (Readonly<{
+        id: "stripe.payout.create";
+        label: "Stripe payout";
+        action_type: "stripe.payout.create";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Moves money out. Bind amount/currency/destination to a named human approval.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "stripe.refund.create";
+        label: "Stripe refund";
+        action_type: "stripe.refund.create";
+        risk: "high";
+        receipt_required: true;
+        assurance_class: "class_a";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Returns funds. Bind the payment and amount so a refund cannot be silently inflated.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }> | Readonly<{
+        id: "stripe.bank_account.change";
+        label: "Stripe payout-destination change";
+        action_type: "stripe.bank_account.change";
+        risk: "critical";
+        receipt_required: true;
+        assurance_class: "quorum";
+        match: {
+            protocol: string;
+            tool: string;
+        };
+        why: "Changes WHERE future money flows. Quorum: the classic redirect-the-payouts attack.";
+        execution_binding: {
+            required_fields: string[];
+        };
+    }>)[];
+    STRIPE_OPS: readonly string[];
+    createStripeManifest: typeof createStripeManifest;
+    guardStripeMutation: typeof guardStripeMutation;
+};
+export default _default;
+//# sourceMappingURL=stripe.d.ts.map

package/dist/adapters/stripe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.d.ts","sourceRoot":"","sources":["../../src/adapters/stripe.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsB7B,CAAC;AAqBH,eAAO,MAAM,UAAU,mBAAc,CAAC;AAEtC,wBAAgB,oBAAoB,CAAC,YAAY,UAAK;;;EAErD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,KAAA,EAAE,MAAM,KAAA,EAAE,IAAI,KAAA;;;;GAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAED,wBAA6F"}

package/dist/adapters/stripe.js

@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Stripe / payments System-of-Record adapter.
+ *
+ * "Install this before your agent can move money." Wraps the destructive Stripe
+ * operations so a payout, refund, or payout-destination change never reaches
+ * Stripe without a valid, sufficiently-assured, non-replayed receipt bound to
+ * THIS amount/destination. A receipt for $100 to acct_A cannot authorize
+ * $10,000 to acct_B.
+ *
+ *   import Stripe from 'stripe';
+ *   import { createGate } from '@emilia-protocol/gate';
+ *   import { createStripeManifest, guardStripeMutation } from '@emilia-protocol/gate/adapters/stripe';
+ *
+ *   const gate = createGate({ manifest: createStripeManifest(), trustedKeys: [ISSUER], store: sharedConsumptionStore });
+ *   await guardStripeMutation(gate, new Stripe(key), {
+ *     op: 'payout.create', params: { amount: 40000, currency: 'usd', destination: 'acct_x' }, receipt,
+ *   });
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+export const STRIPE_ACTION_PACK = Object.freeze([
+    Object.freeze({
+        id: 'stripe.payout.create', label: 'Stripe payout', action_type: 'stripe.payout.create',
+        risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'stripe', tool: 'create_payout' },
+        why: 'Moves money out. Bind amount/currency/destination to a named human approval.',
+        execution_binding: { required_fields: ['action_type', 'amount', 'currency', 'destination'] },
+    }),
+    Object.freeze({
+        id: 'stripe.refund.create', label: 'Stripe refund', action_type: 'stripe.refund.create',
+        risk: 'high', receipt_required: true, assurance_class: 'class_a',
+        match: { protocol: 'stripe', tool: 'create_refund' },
+        why: 'Returns funds. Bind the payment and amount so a refund cannot be silently inflated.',
+        execution_binding: { required_fields: ['action_type', 'payment_intent', 'amount'] },
+    }),
+    Object.freeze({
+        id: 'stripe.bank_account.change', label: 'Stripe payout-destination change', action_type: 'stripe.bank_account.change',
+        risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+        match: { protocol: 'stripe', tool: 'update_external_account' },
+        why: 'Changes WHERE future money flows. Quorum: the classic redirect-the-payouts attack.',
+        execution_binding: { required_fields: ['action_type', 'account', 'external_account'] },
+    }),
+]);
+const OPS = {
+    'payout.create': {
+        selector: { protocol: 'stripe', tool: 'create_payout' },
+        observed: (p) => ({ action_type: 'stripe.payout.create', amount: p.amount, currency: p.currency, destination: p.destination }),
+        perform: (stripe, p) => stripe.payouts.create({ amount: p.amount, currency: p.currency, destination: p.destination }),
+    },
+    'refund.create': {
+        selector: { protocol: 'stripe', tool: 'create_refund' },
+        observed: (p) => ({ action_type: 'stripe.refund.create', payment_intent: p.payment_intent, amount: p.amount }),
+        perform: (stripe, p) => stripe.refunds.create({ payment_intent: p.payment_intent, amount: p.amount }),
+    },
+    'bank_account.change': {
+        selector: { protocol: 'stripe', tool: 'update_external_account' },
+        observed: (p) => ({ action_type: 'stripe.bank_account.change', account: p.account, external_account: p.external_account }),
+        perform: (stripe, p) => stripe.accounts.updateExternalAccount(p.account, p.external_account, p.update || {}),
+    },
+};
+const adapter = createAdapter({ system: 'stripe', ops: OPS });
+export const STRIPE_OPS = adapter.OPS;
+export function createStripeManifest(extraActions = []) {
+    return manifestFromPack(STRIPE_ACTION_PACK, extraActions);
+}
+/**
+ * Guard a destructive Stripe mutation behind the gate.
+ * @param {object} gate    a gate built with createStripeManifest()
+ * @param {object} stripe  a Stripe-like client (the official `stripe` SDK or compatible)
+ * @param {object} args    { op:'payout.create'|'refund.create'|'bank_account.change', params, receipt }
+ * @throws Error{code:'EMILIA_RECEIPT_REQUIRED'} if refused — the call never reaches Stripe
+ */
+export function guardStripeMutation(gate, stripe, args) {
+    return adapter.guard(gate, stripe, args);
+}
+export default { STRIPE_ACTION_PACK, STRIPE_OPS, createStripeManifest, guardStripeMutation };
+//# sourceMappingURL=stripe.js.map

package/dist/adapters/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../src/adapters/stripe.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB;QACvF,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;QACpD,GAAG,EAAE,8EAA8E;QACnF,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE;KAC7F,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB;QACvF,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS;QAChE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;QACpD,GAAG,EAAE,qFAAqF;QAC1F,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE;KACpF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,kCAAkC,EAAE,WAAW,EAAE,4BAA4B;QACtH,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ;QACnE,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;QAC9D,GAAG,EAAE,oFAAoF;QACzF,iBAAiB,EAAE,EAAE,eAAe,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE;KACvF,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG;IACV,eAAe,EAAE;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9H,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;KACtH;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9G,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KACtG;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;QACjE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1H,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;KAC7G;CACF,CAAC;AAEF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;AAEtC,MAAM,UAAU,oBAAoB,CAAC,YAAY,GAAG,EAAE;IACpD,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,CAAC"}