@emilia-protocol/gate 0.11.0 → 0.13.0

package/dist/aec-execution.d.ts

@@ -0,0 +1,107 @@
+import { MemoryConsumptionStore } from './store.js';
+type Obj = Record<string, any>;
+type ConsumptionStore = {
+    durable?: boolean;
+    ownershipFenced?: boolean;
+    permanentConsumption?: boolean;
+    reserve?: (key: string) => Promise<boolean> | boolean;
+    commit?: (key: string) => Promise<boolean> | boolean;
+    release?: (key: string) => Promise<void> | void;
+};
+type ExecutionEvidenceLog = {
+    durable?: boolean;
+    strict?: boolean;
+    forkAware?: boolean;
+    atomicAppend?: boolean;
+    record?: (entry: Obj) => Promise<Obj> | Obj;
+};
+declare function deepFreeze(value: any): any;
+declare function validLogRecord(record: any, atomicRequired: any, expectedEntry: any): boolean;
+declare function validComponent(result: any, type: any): any;
+declare function humanFloorSatisfied(result: any, floor: any): any;
+declare function evidenceSatisfied(result: any): boolean;
+declare function consumptionKey(result: any): string | null;
+declare function instant(now: any): string | null;
+/**
+ * @param {object} [config]
+ * @param {string} [config.requirement] relying-party AEC requirement (required at runtime)
+ * @param {object} [config.policiesByType] relying-party human acceptance profiles (required at runtime)
+ * @param {object} [config.verifiers] relying-party-pinned custom component verifiers
+ * @param {object} [config.keysByType] relying-party-pinned custom verifier keys
+ * @param {'class_a'|'quorum'|'class_a_or_quorum'} [config.humanFloor] (required at runtime)
+ * @param {object} [config.store] ownership-fenced consumption store
+ * @param {object} [config.log] tamper-evident evidence log
+ * @param {boolean} [config.allowEphemeralState=false] test/demo opt-in only
+ * @param {Function|number|Date} [config.now=Date.now]
+ */
+export declare function createAECExecutionGate({ requirement, policiesByType, verifiers, keysByType, humanFloor, store, log, allowEphemeralState, now, }?: {
+    requirement?: string;
+    policiesByType?: Obj;
+    verifiers?: Record<string, Function>;
+    keysByType?: Obj;
+    humanFloor?: 'class_a' | 'quorum' | 'class_a_or_quorum';
+    store?: ConsumptionStore;
+    log?: ExecutionEvidenceLog;
+    allowEphemeralState?: boolean;
+    now?: (() => number) | number | Date;
+}): {
+    run: (request: Obj | undefined, effect: (input: {
+        action: any;
+        result: any;
+        authorization: any;
+    }) => any) => Promise<{
+        ok: false;
+        allow: false;
+        reason: string;
+        result: Obj | null;
+        decision: any;
+        value?: undefined;
+        authorization?: undefined;
+        execution?: undefined;
+    } | {
+        ok: true;
+        allow: true;
+        value: any;
+        result: any;
+        authorization: any;
+        execution: any;
+        reason?: undefined;
+    }>;
+    evidence: {
+        durable: boolean;
+        persisted: boolean;
+        strict: boolean;
+        forkAware: boolean;
+        atomicAppend: boolean;
+        record(entry: any): Promise<any>;
+        all(): Record<string, any>[];
+        verify(): {
+            ok: boolean;
+            at: any;
+            reason: string;
+            length?: undefined;
+            head?: undefined;
+        } | {
+            ok: boolean;
+            length: number;
+            head: string | null;
+            at?: undefined;
+            reason?: undefined;
+        };
+    } | ExecutionEvidenceLog;
+    store: MemoryConsumptionStore | ConsumptionStore;
+};
+export declare const __aecExecutionSecurityInternals: Readonly<{
+    deepFreeze: typeof deepFreeze;
+    validLogRecord: typeof validLogRecord;
+    validComponent: typeof validComponent;
+    humanFloorSatisfied: typeof humanFloorSatisfied;
+    evidenceSatisfied: typeof evidenceSatisfied;
+    consumptionKey: typeof consumptionKey;
+    instant: typeof instant;
+}>;
+declare const _default: {
+    createAECExecutionGate: typeof createAECExecutionGate;
+};
+export default _default;
+//# sourceMappingURL=aec-execution.d.ts.map

package/dist/aec-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aec-execution.d.ts","sourceRoot":"","sources":["../src/aec-execution.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGpD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE/B,KAAK,gBAAgB,GAAG;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACrD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACjD,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;CAC7C,CAAC;AAQF,iBAAS,UAAU,CAAC,KAAK,KAAA,OAYxB;AAED,iBAAS,cAAc,CAAC,MAAM,KAAA,EAAE,cAAc,KAAA,EAAE,aAAa,KAAA,WAE5D;AAED,iBAAS,cAAc,CAAC,MAAM,KAAA,EAAE,IAAI,KAAA,OAGnC;AAED,iBAAS,mBAAmB,CAAC,MAAM,KAAA,EAAE,KAAK,KAAA,OAMzC;AAED,iBAAS,iBAAiB,CAAC,MAAM,KAAA,WAWhC;AAED,iBAAS,cAAc,CAAC,MAAM,KAAA,iBAS7B;AAED,iBAAS,OAAO,CAAC,GAAG,KAAA,iBAQnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,WAAW,EACX,cAAc,EACd,SAAc,EACd,UAAe,EACf,UAAU,EACV,KAAK,EACL,GAAG,EACH,mBAA2B,EAC3B,GAAc,GACf,GAAE;IACD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,mBAAmB,CAAC;IACxD,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC;CACjC;mBAiGO,GAAG,sBACJ,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,GAAG,CAAC;QAAC,aAAa,EAAE,GAAG,CAAA;KAAE,KAAK,GAAG,KACvE,OAAO,CACN;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAE,GACnJ;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,GAAG,CAAC;QAAC,aAAa,EAAE,GAAG,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,CAC7G;;;;;;;;;;;;;;;;;;;;;;;;EAwGF;AAED,eAAO,MAAM,+BAA+B;;;;;;;;EAQ1C,CAAC;;;;AAEH,wBAA0C"}

package/dist/aec-execution.js

@@ -0,0 +1,334 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Stateful execution boundary for EP-AEC.
+ *
+ * verifyAuthorizationChain is a pure evidence-composition decision. This
+ * wrapper adds the stateful properties an executor needs: independently bound
+ * action bytes, a mandatory human-assurance floor, atomic one-time reservation,
+ * tamper-evident decision records, and conservative crash semantics.
+ */
+import { createEvidenceLog, verifyEvidenceRecord } from './evidence.js';
+import { MemoryConsumptionStore } from './store.js';
+import { verifyAuthorizationChain } from '@emilia-protocol/verify/evidence-chain';
+const HUMAN_FLOORS = new Set(['class_a', 'quorum', 'class_a_or_quorum']);
+const HEX_256 = /^[0-9a-f]{64}$/;
+const COMPONENT_TYPE = /^[A-Za-z0-9_.:-]+$/;
+const RESERVED_COMPONENT_TYPES = new Set(['ep-receipt', 'ep-quorum']);
+const own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+function deepFreeze(value) {
+    if (!value || typeof value !== 'object')
+        return value;
+    const stack = [value];
+    const seen = new WeakSet();
+    while (stack.length) {
+        const current = stack.pop();
+        if (!current || typeof current !== 'object' || seen.has(current))
+            continue;
+        seen.add(current);
+        for (const child of Object.values(current))
+            stack.push(child);
+        Object.freeze(current);
+    }
+    return value;
+}
+function validLogRecord(record, atomicRequired, expectedEntry) {
+    return verifyEvidenceRecord(record, { atomicRequired, expectedEntry });
+}
+function validComponent(result, type) {
+    return Array.isArray(result?.components)
+        && result.components.some((component) => component.type === type && component.valid === true && component.bound === true);
+}
+function humanFloorSatisfied(result, floor) {
+    const classA = validComponent(result, 'ep-receipt');
+    const quorum = validComponent(result, 'ep-quorum');
+    if (floor === 'class_a')
+        return classA;
+    if (floor === 'quorum')
+        return quorum;
+    return classA || quorum;
+}
+function evidenceSatisfied(result) {
+    try {
+        if (!result || typeof result !== 'object')
+            return false;
+        // New verifiers expose the evidence-layer term. Older supported 3.x
+        // verifiers expose the equivalent `allow` result only. If `satisfied` is
+        // present, it is authoritative so a conflicting compatibility alias can
+        // never upgrade a refusal.
+        return own(result, 'satisfied') ? result.satisfied === true : result.allow === true;
+    }
+    catch {
+        return false;
+    }
+}
+function consumptionKey(result) {
+    // Consume the executor-owned action instance, not a presenter-selected
+    // component identifier. Otherwise an invalid decoy component or an alternate
+    // valid human proof can create a fresh key for the same physical effect.
+    // Repeated intended effects therefore need a unique nonce/id inside the
+    // canonical action before authorization is collected.
+    return HEX_256.test(result?.action_digest)
+        ? `aec:action:${result.action_digest}`
+        : null;
+}
+function instant(now) {
+    try {
+        const value = typeof now === 'function' ? now() : now;
+        const date = value instanceof Date ? value : new Date(value);
+        return Number.isFinite(date.getTime()) ? date.toISOString() : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * @param {object} [config]
+ * @param {string} [config.requirement] relying-party AEC requirement (required at runtime)
+ * @param {object} [config.policiesByType] relying-party human acceptance profiles (required at runtime)
+ * @param {object} [config.verifiers] relying-party-pinned custom component verifiers
+ * @param {object} [config.keysByType] relying-party-pinned custom verifier keys
+ * @param {'class_a'|'quorum'|'class_a_or_quorum'} [config.humanFloor] (required at runtime)
+ * @param {object} [config.store] ownership-fenced consumption store
+ * @param {object} [config.log] tamper-evident evidence log
+ * @param {boolean} [config.allowEphemeralState=false] test/demo opt-in only
+ * @param {Function|number|Date} [config.now=Date.now]
+ */
+export function createAECExecutionGate({ requirement, policiesByType, verifiers = {}, keysByType = {}, humanFloor, store, log, allowEphemeralState = false, now = Date.now, } = {}) {
+    if (typeof requirement !== 'string' || !requirement.trim()) {
+        throw new Error('AEC execution gate requires a relying-party requirement');
+    }
+    if (!policiesByType || typeof policiesByType !== 'object' || Array.isArray(policiesByType)) {
+        throw new Error('AEC execution gate requires relying-party policiesByType');
+    }
+    let pinnedPolicies;
+    try {
+        pinnedPolicies = deepFreeze(structuredClone(policiesByType));
+    }
+    catch {
+        throw new Error('AEC execution gate policiesByType must be cloneable canonical data');
+    }
+    if (!verifiers || typeof verifiers !== 'object' || Array.isArray(verifiers)) {
+        throw new Error('AEC execution gate verifiers must be a relying-party-owned object');
+    }
+    const pinnedVerifiers = Object.create(null);
+    try {
+        for (const [type, verifier] of Object.entries(verifiers)) {
+            if (!COMPONENT_TYPE.test(type) || type.length > 128 || RESERVED_COMPONENT_TYPES.has(type)
+                || typeof verifier !== 'function') {
+                throw new Error('invalid verifier registry member');
+            }
+            pinnedVerifiers[type] = verifier;
+        }
+        Object.freeze(pinnedVerifiers);
+    }
+    catch {
+        throw new Error('AEC execution gate verifiers must contain only named custom verifier functions');
+    }
+    if (!keysByType || typeof keysByType !== 'object' || Array.isArray(keysByType)) {
+        throw new Error('AEC execution gate keysByType must be a relying-party-owned object');
+    }
+    let pinnedKeysByType;
+    try {
+        pinnedKeysByType = deepFreeze(structuredClone(keysByType));
+    }
+    catch {
+        throw new Error('AEC execution gate keysByType must be cloneable canonical data');
+    }
+    if (!HUMAN_FLOORS.has(humanFloor)) {
+        throw new Error('AEC execution gate requires humanFloor class_a, quorum, or class_a_or_quorum');
+    }
+    if (!store && !allowEphemeralState) {
+        throw new Error('AEC execution gate requires a durable consumption store');
+    }
+    if (!log && !allowEphemeralState) {
+        throw new Error('AEC execution gate requires a durable strict evidence log');
+    }
+    const consumption = store || new MemoryConsumptionStore();
+    const evidence = log || createEvidenceLog({ strict: true });
+    if (!allowEphemeralState && (consumption.durable !== true || consumption.ownershipFenced !== true
+        || consumption.permanentConsumption !== true)) {
+        throw new Error('AEC execution gate requires a capability-marked, ownership-fenced durable store with non-expiring committed keys');
+    }
+    if (!allowEphemeralState && (evidence.durable !== true || evidence.strict !== true
+        || evidence.forkAware !== true || evidence.atomicAppend !== true)) {
+        throw new Error('AEC execution gate requires a durable strict evidence log with atomic shared-head append and fork detection');
+    }
+    for (const method of ['reserve', 'commit']) {
+        if (typeof consumption?.[method] !== 'function') {
+            throw new Error(`AEC execution gate consumption store requires ${method}()`);
+        }
+    }
+    if (typeof evidence?.record !== 'function') {
+        throw new Error('AEC execution gate evidence log requires record()');
+    }
+    // Capture the methods that passed construction checks. Callers may retain the
+    // objects for observability, but replacing a method later must not rewrite the
+    // gate's replay or evidence semantics.
+    // The loop above already proves reserve/commit are functions; TS can't track
+    // narrowing through a dynamic (computed) property key, hence the assertions.
+    const reserveConsumption = consumption.reserve.bind(consumption);
+    const commitConsumption = consumption.commit.bind(consumption);
+    const releaseConsumption = typeof consumption.release === 'function'
+        ? consumption.release.bind(consumption) : null;
+    const recordEvidence = evidence.record.bind(evidence);
+    async function deny(reason, result = null, extra = {}) {
+        let decision = null;
+        try {
+            const entry = {
+                type: 'aec.execution.decision',
+                at: instant(now),
+                allow: false,
+                reason,
+                action_digest: result?.action_digest ?? null,
+                requirement,
+                human_floor: humanFloor,
+                ...extra,
+            };
+            decision = await recordEvidence(entry);
+            if (!validLogRecord(decision, !allowEphemeralState, entry))
+                throw new Error('malformed evidence record');
+        }
+        catch {
+            return { ok: false, allow: false, reason: 'evidence_log_failed', result, decision: null };
+        }
+        return { ok: false, allow: false, reason, result, decision };
+    }
+    async function run(request = {}, effect) {
+        if (typeof effect !== 'function')
+            throw new Error('AEC execution gate run() requires an effect function');
+        let chain;
+        let expectedAction;
+        try {
+            if (!request || typeof request !== 'object' || Array.isArray(request)) {
+                return deny('invalid_execution_request');
+            }
+            // Trust configuration belongs to the relying party at gate construction.
+            // Accepting verifier code or trust keys beside presenter evidence lets the
+            // presenter define the proof that its own evidence must pass.
+            if (own(request, 'verifiers') || own(request, 'keysByType') || own(request, 'policiesByType')) {
+                return deny('runtime_trust_configuration_refused');
+            }
+            chain = request.chain;
+            expectedAction = request.expectedAction;
+        }
+        catch {
+            return deny('invalid_execution_request');
+        }
+        const verificationTime = instant(now);
+        if (!verificationTime)
+            return deny('invalid_verification_time');
+        let actionSnapshot;
+        try {
+            actionSnapshot = deepFreeze(structuredClone(expectedAction));
+        }
+        catch {
+            return deny('invalid_expected_action');
+        }
+        const result = verifyAuthorizationChain(chain, {
+            verifiers: pinnedVerifiers,
+            keysByType: pinnedKeysByType,
+            policiesByType: pinnedPolicies,
+            requirement,
+            expectedAction: actionSnapshot,
+            verificationTime,
+        });
+        if (!evidenceSatisfied(result))
+            return deny('aec_refused', result, { reasons: result.reasons });
+        if (!humanFloorSatisfied(result, humanFloor))
+            return deny('human_floor_unsatisfied', result);
+        const key = consumptionKey(result);
+        if (!key)
+            return deny('missing_stable_consumption_key', result);
+        let reserved;
+        try {
+            reserved = (await reserveConsumption(key)) === true;
+        }
+        catch {
+            return deny('consumption_store_unavailable', result, { consumption_key: key });
+        }
+        if (!reserved)
+            return deny('replay_refused', result, { consumption_key: key });
+        let authorization;
+        try {
+            const entry = {
+                type: 'aec.execution.decision',
+                at: verificationTime,
+                allow: true,
+                reason: 'allow',
+                action_digest: result.action_digest,
+                requirement,
+                human_floor: humanFloor,
+                consumption_key: key,
+            };
+            authorization = await recordEvidence(entry);
+            if (!validLogRecord(authorization, !allowEphemeralState, entry))
+                throw new Error('malformed evidence record');
+        }
+        catch {
+            try {
+                if (releaseConsumption)
+                    await releaseConsumption(key);
+            }
+            catch { /* frozen is safe */ }
+            return { ok: false, allow: false, reason: 'evidence_log_failed', result, decision: null };
+        }
+        let effectStarted = false;
+        let committed = false;
+        try {
+            effectStarted = true;
+            const value = await effect({ action: actionSnapshot, result, authorization });
+            if ((await commitConsumption(key)) !== true)
+                throw new Error('consumption_store_commit_refused');
+            committed = true;
+            const executionEntry = {
+                type: 'aec.execution.outcome',
+                at: instant(now),
+                outcome: 'executed',
+                authorizes_decision: authorization.hash,
+                action_digest: result.action_digest,
+                consumption_key: key,
+            };
+            const execution = await recordEvidence(executionEntry);
+            if (!validLogRecord(execution, !allowEphemeralState, executionEntry))
+                throw new Error('malformed evidence record');
+            return { ok: true, allow: true, value, result, authorization, execution };
+        }
+        catch (error) {
+            if (effectStarted && !committed) {
+                try {
+                    committed = (await commitConsumption(key)) === true;
+                }
+                catch { /* reservation remains fail-closed */ }
+            }
+            try {
+                const indeterminateEntry = {
+                    type: 'aec.execution.outcome',
+                    at: instant(now),
+                    outcome: 'indeterminate',
+                    authorizes_decision: authorization.hash,
+                    action_digest: result.action_digest,
+                    consumption_key: key,
+                };
+                const indeterminate = await recordEvidence(indeterminateEntry);
+                if (!validLogRecord(indeterminate, !allowEphemeralState, indeterminateEntry)) {
+                    throw new Error('malformed evidence record');
+                }
+            }
+            catch { /* the original failure remains primary; replay is still blocked */ }
+            throw error;
+        }
+    }
+    return { run, evidence, store: consumption };
+}
+export const __aecExecutionSecurityInternals = Object.freeze({
+    deepFreeze,
+    validLogRecord,
+    validComponent,
+    humanFloorSatisfied,
+    evidenceSatisfied,
+    consumptionKey,
+    instant,
+});
+export default { createAECExecutionGate };
+//# sourceMappingURL=aec-execution.js.map

package/dist/aec-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aec-execution.js","sourceRoot":"","sources":["../src/aec-execution.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAqBlF,MAAM,YAAY,GAA4B,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAClG,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AACtE,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAE7E,SAAS,UAAU,CAAC,KAAK;IACvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa;IAC3D,OAAO,oBAAoB,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,MAAM,EAAE,IAAI;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;WACnC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAM,EAAE,KAAK;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,MAAM,IAAI,MAAM,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAM;IAC/B,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxD,oEAAoE;QACpE,yEAAyE;QACzE,wEAAwE;QACxE,2BAA2B;QAC3B,OAAO,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAM;IAC5B,uEAAuE;IACvE,6EAA6E;IAC7E,yEAAyE;IACzE,wEAAwE;IACxE,sDAAsD;IACtD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC;QACxC,CAAC,CAAC,cAAc,MAAM,CAAC,aAAa,EAAE;QACtC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,GAAG;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,WAAW,EACX,cAAc,EACd,SAAS,GAAG,EAAE,EACd,UAAU,GAAG,EAAE,EACf,UAAU,EACV,KAAK,EACL,GAAG,EACH,mBAAmB,GAAG,KAAK,EAC3B,GAAG,GAAG,IAAI,CAAC,GAAG,MAWZ,EAAE;IACJ,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,cAAc,CAAC;IACnB,IAAI,CAAC;QAAC,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;IAAC,CAAC;IACrE,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAAC,CAAC;IAChG,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC;mBAClF,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,gBAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,gBAAgB,GAAG,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;IAAC,CAAC;IACnE,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAAC,CAAC;IAC5F,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAG,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,mBAAmB,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,IAAI,IAAI,WAAW,CAAC,eAAe,KAAK,IAAI;WAC1F,WAAW,CAAC,oBAAoB,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;WAC3E,QAAQ,CAAC,SAAS,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;IACjI,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,IAAI,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,OAAO,QAAQ,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,8EAA8E;IAC9E,+EAA+E;IAC/E,uCAAuC;IACvC,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,OAAO,WAAW,CAAC,OAAO,KAAK,UAAU;QAClE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtD,KAAK,UAAU,IAAI,CACjB,MAAc,EACd,SAAqB,IAAI,EACzB,QAAa,EAAE;QAEf,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC;gBAChB,KAAK,EAAE,KAAK;gBACZ,MAAM;gBACN,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,IAAI;gBAC5C,WAAW;gBACX,WAAW,EAAE,UAAU;gBACvB,GAAG,KAAK;aACT,CAAC;YACF,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,UAAU,GAAG,CAChB,UAAe,EAAE,EACjB,MAAwE;QAKxE,IAAI,OAAO,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1G,IAAI,KAAK,CAAC;QACV,IAAI,cAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC3C,CAAC;YACD,yEAAyE;YACzE,2EAA2E;YAC3E,8DAA8D;YAC9D,IAAI,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAC9F,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YACtB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChE,IAAI,cAAc,CAAC;QACnB,IAAI,CAAC;YAAC,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC;QAAC,CAAC;QACrE,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,EAAE;YAC7C,SAAS,EAAE,eAAe;YAC1B,UAAU,EAAE,gBAAgB;YAC5B,cAAc,EAAE,cAAc;YAC9B,WAAW;YACX,cAAc,EAAE,cAAc;YAC9B,gBAAgB;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAE7F,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;QAEhE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YAAC,QAAQ,GAAG,CAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;QAAC,CAAC;QAC5D,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,+BAA+B,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QACzF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/E,IAAI,aAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,EAAE,EAAE,gBAAgB;gBACpB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,OAAO;gBACf,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW;gBACX,WAAW,EAAE,UAAU;gBACvB,eAAe,EAAE,GAAG;aACrB,CAAC;YACF,aAAa,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAChH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBAAC,IAAI,kBAAkB;oBAAE,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;QAED,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACjG,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,cAAc,GAAG;gBACrB,IAAI,EAAE,uBAAuB;gBAC7B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC;gBAChB,OAAO,EAAE,UAAU;gBACnB,mBAAmB,EAAE,aAAa,CAAC,IAAI;gBACvC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,eAAe,EAAE,GAAG;aACrB,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;YACvD,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,mBAAmB,EAAE,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACnH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC;oBAAC,SAAS,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,kBAAkB,GAAG;oBACzB,IAAI,EAAE,uBAAuB;oBAC7B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC;oBAChB,OAAO,EAAE,eAAe;oBACxB,mBAAmB,EAAE,aAAa,CAAC,IAAI;oBACvC,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,eAAe,EAAE,GAAG;iBACrB,CAAC;gBACF,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC;YAC/E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,UAAU;IACV,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,OAAO;CACR,CAAC,CAAC;AAEH,eAAe,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/breakglass.d.ts

@@ -0,0 +1,205 @@
+export declare const BREAKGLASS_VERSION = "EP-GATE-BREAKGLASS-v1";
+export declare const BREAKGLASS_EVIDENCE_KIND = "breakglass";
+type Obj = Record<string, any>;
+/** Relying-party break-glass trust policy: pinned roster + minimum threshold. */
+type BreakGlassPolicy = {
+    minimum_threshold: number;
+    roster: Array<{
+        kid: string;
+        principal_id: string;
+        key?: string;
+    }>;
+};
+/** Optional pinned keys when roster entries omit their own `key`. */
+type IssuerKeys = Record<string, string> | Array<{
+    kid: string;
+    key: string;
+}>;
+/** Injected clock: fixed ms/ISO value, or a () => ms function (default Date.now). */
+type BreakGlassClock = number | string | (() => number);
+/**
+ * Mint a break-glass authorization: every signer signs the canonical JSON of
+ * the SAME grant payload. Throws on invalid fields — a malformed grant must
+ * never be issued, only refused. Signer kids must already be distinct at mint
+ * time: one key can never pre-fill two threshold slots. Relying-party principal
+ * uniqueness is enforced at verification through the pinned policy roster.
+ *
+ * grant_id is CONTENT-DERIVED (sha-256 of the canonical grant fields), so the
+ * id is deterministic and re-minting the identical grant yields the identical
+ * single-use consumption key — the same emergency authorization cannot be
+ * "refreshed" into extra uses by minting it twice.
+ *
+ * @param {Array<{ privateKey: crypto.KeyObject, kid: string }>} signers
+ * @param {object} fields { scope: { action_types: string[] }, window: { not_before, expires_at }, reason, incident_ref, threshold }
+ * @returns {{ '@version': string, payload: object, signatures: Array<{ kid: string, algorithm: 'Ed25519', value: string }> }}
+ */
+export declare function mintBreakGlassAuthorization(signers: any, { scope, window: win, reason, incident_ref, threshold, }?: {
+    scope?: {
+        action_types: string[];
+    };
+    window?: {
+        not_before: number | string;
+        expires_at: number | string;
+    };
+    reason?: string;
+    incident_ref?: string;
+    threshold?: number;
+}): {
+    '@version': string;
+    payload: {
+        scope: {
+            action_types: string[];
+        };
+        window: {
+            not_before: string | number;
+            expires_at: string | number;
+        };
+        reason: string | undefined;
+        incident_ref: string | undefined;
+        threshold: number;
+        grant_id: string;
+    };
+    signatures: {
+        kid: any;
+        algorithm: string;
+        value: string;
+    }[];
+};
+export declare function verifyBreakGlass(grantJson: any, options?: {}): {
+    valid: boolean;
+    reason: any;
+};
+/**
+ * SINGLE-USE consumption via the consumption-store contract (store.js):
+ * `consume(key)` returns true the FIRST time, false on every replay, and marks
+ * the key seen BEFORE the caller acts — consumption is committed before use.
+ * If the process crashes after consume() and before the override, the grant is
+ * burned, not replayable: the fail direction is unusable, never reusable.
+ *
+ * Accepts the grant document ({ payload: { grant_id } }) or a verified result
+ * ({ grant_id }). NEVER throws — a missing store, missing grant_id, or a store
+ * error all refuse with a machine-readable reason. This is a low-level primitive;
+ * only runBreakGlass also enforces store capabilities, evidence, and execution order.
+ *
+ * @param {object} grant break-glass grant document or verifyBreakGlass result
+ * @param {{ consume(key: string): Promise<boolean> }} store consumption store (store.js contract)
+ * @returns {Promise<{ consumed: boolean, reason: string, key?: string }>}
+ */
+export declare function consumeBreakGlass(grant: any, store: any): Promise<{
+    consumed: boolean;
+    reason: string;
+    key?: undefined;
+} | {
+    consumed: boolean;
+    reason: string;
+    key: string;
+}>;
+export declare function buildBreakGlassEvidence(grant: any, decision: any, options?: {}): {
+    kind: string;
+    '@version': string;
+    at: string;
+    grant_id: any;
+    incident_ref: any;
+    grant_reason: any;
+    scope: any;
+    threshold: any;
+    policy_minimum_threshold: any;
+    required_threshold: any;
+    signer_kids: any;
+    signer_principal_ids: any;
+    signer_spki_fingerprints: any;
+    grant_hash: string | null;
+    decision: {
+        allow: boolean;
+        reason: any;
+        action_type: any;
+    };
+};
+/**
+ * The sole high-level break-glass execution path. It snapshots the presented
+ * artifact, verifies it against relying-party policy, atomically consumes the
+ * grant in a capability-marked permanent store, validates a strict evidence
+ * acknowledgement, and only then invokes `effect`.
+ *
+ * @param {object} [args]
+ * @param {object|string} [args.grant] the presented break-glass artifact
+ * @param {{minimum_threshold:number,roster:Array<{kid:string,principal_id:string,key?:string}>}} [args.policy]
+ * @param {object|Array<{kid:string,key:string}>} [args.issuerKeys]
+ * @param {string} [args.actionType]
+ * @param {{ consume(key: string): Promise<boolean> }} [args.store]
+ * @param {{ strict?: boolean, atomicAppend?: boolean, record?: Function }} [args.evidence]
+ * @param {number|string|function} [args.now=Date.now]
+ * @param {Function} [effect] required at runtime; a missing effect throws
+ */
+export declare function runBreakGlass({ grant, policy, issuerKeys, actionType, store, evidence, now, }: {
+    grant?: Obj | string;
+    policy?: BreakGlassPolicy;
+    issuerKeys?: IssuerKeys;
+    actionType?: string;
+    store?: {
+        consume(key: string): Promise<boolean>;
+    };
+    evidence?: {
+        strict?: boolean;
+        atomicAppend?: boolean;
+        record?: (entry: Obj) => any;
+    };
+    now?: BreakGlassClock;
+} | undefined, effect: any): Promise<{
+    ok: boolean;
+    reason: any;
+    verification: {
+        valid: boolean;
+        reason: any;
+    };
+    consumption: null;
+    evidence: null;
+    result?: undefined;
+} | {
+    ok: boolean;
+    reason: string;
+    verification: {
+        valid: boolean;
+        reason: any;
+    };
+    consumption: {
+        consumed: boolean;
+        reason: string;
+        key?: undefined;
+    } | {
+        consumed: boolean;
+        reason: string;
+        key: string;
+    };
+    evidence: null;
+    result?: undefined;
+} | {
+    ok: boolean;
+    reason: string;
+    result: any;
+    verification: {
+        valid: boolean;
+        reason: any;
+    };
+    consumption: {
+        consumed: boolean;
+        reason: string;
+        key?: undefined;
+    } | {
+        consumed: boolean;
+        reason: string;
+        key: string;
+    };
+    evidence: any;
+}>;
+declare const _default: {
+    mintBreakGlassAuthorization: typeof mintBreakGlassAuthorization;
+    verifyBreakGlass: typeof verifyBreakGlass;
+    consumeBreakGlass: typeof consumeBreakGlass;
+    buildBreakGlassEvidence: typeof buildBreakGlassEvidence;
+    runBreakGlass: typeof runBreakGlass;
+    BREAKGLASS_VERSION: string;
+    BREAKGLASS_EVIDENCE_KIND: string;
+};
+export default _default;
+//# sourceMappingURL=breakglass.d.ts.map

package/dist/breakglass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breakglass.d.ts","sourceRoot":"","sources":["../src/breakglass.ts"],"names":[],"mappings":"AAgDA,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,wBAAwB,eAAe,CAAC;AAErD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE/B,iFAAiF;AACjF,KAAK,gBAAgB,GAAG;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,qEAAqE;AACrE,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/E,qFAAqF;AACrF,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;AAiCxD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,KAAA,EAAE,EACnD,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,GACpD,GAAE;IACD,KAAK,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACnC,MAAM,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACf;;;;;;;;;;;;;;;;;;;;EAkEL;AAiOD,wBAAgB,gBAAgB,CAAC,SAAS,KAAA,EAAE,OAAO,KAAK;;;EAEvD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,KAAA,EAAE,KAAK,KAAA;;;;;;;;GAiBnD;AA2DD,wBAAgB,uBAAuB,CAAC,KAAK,KAAA,EAAE,QAAQ,KAAA,EAAE,OAAO,KAAK;;;;;;;;;;;;;;;;;;;;EAoBpE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,aAAa,CAAC,EAClC,KAAK,EACL,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,EACL,QAAQ,EACR,GAAc,GACf,EAAE;IACD,KAAK,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACnD,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAA;KAAE,CAAC;IACtF,GAAG,CAAC,EAAE,eAAe,CAAC;CACvB,YAAK,EAAE,MAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2Eb;;;;;;;;;;AAED,wBAQE"}