@emilia-protocol/gate 0.11.0 → 0.14.0

package/dist/eg1-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eg1-conformance.js","sourceRoot":"","sources":["../src/eg1-conformance.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAElC,yEAAyE;AACzE,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAChD,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAChH,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,MAAM,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,MAAM,WAAW,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1E,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,SAAS,GAAG,eAAe,KAAK,EAAE,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,UAAU,EACV,QAAQ,EACR,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,EACvB,KAAK,EACL,eAAe,GAAG,SAAS,MAOzB,EAAE;IACJ,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,eAAe;QAChD,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,KAAK,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjE,QAAQ;QACR,SAAS,EAAE,eAAe;QAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAC7C,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QAC3D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5G,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5H,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE;QAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,YAAY;YACrB,OAAO;YACP,QAAQ,EAAE;gBACR,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClD,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClD,SAAS;aACV;YACD,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACpG;QACD,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnG,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,UAAU,EACV,SAAS,GAAG,CAAC,EACb,SAAS,EACT,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,MAMrB,EAAE;IACJ,MAAM,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1K,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE;YACN,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,GAAG;SAChB;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,0FAA0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,iBAAiB;IAC9B,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,sBAAsB,EAAE,cAAc;IACtC,wBAAwB,EAAE,wBAAwB;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IACjE,EAAE,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC3F,EAAE,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,oCAAoC,EAAE;IAC9E,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,qCAAqC,EAAE;IACzE,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAChE,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC/D,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE,iDAAiD,EAAE;IACzF,EAAE,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,wCAAwC,EAAE;CAChF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,GAAG,GAAG,IAAI,CAAC,GAAG,EACd,MAAM,GAAG,kBAAkB,EAC3B,QAAQ,GAAG,KAAK,MAC+D,EAAE;IACjF,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG;QACnB,oBAAoB,EAAE;YACpB,WAAW,EAAE,qBAAqB;YAClC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7F,SAAS,EAAE,GAAG;SACf;QACD,sBAAsB,EAAE;YACtB,WAAW,EAAE,kCAAkC;YAC/C,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC9F,SAAS,EAAE,GAAG;SACf;QACD,uBAAuB,EAAE;YACvB,WAAW,EAAE,4BAA4B;YACzC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7F,SAAS,EAAE,GAAG;SACf;KACF,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG;QACtE,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC,WAAW,EAAE;YACzE,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE;SACzF;KACF,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAE9D,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3F,SAAS,gBAAgB,CAAC,OAAO;QAC/B,OAAO;YACL,UAAU,EAAE,yBAAyB;YACrC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,UAAU,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,MAAM,EAAE,EAC7B,KAAK,GAAG,oBAAoB,EAC5B,OAAO,GAAG,SAAS,EACnB,QAAQ,GAAG,qBAAqB,GACjC,GAAG,EAAE;QACJ,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;QACtG,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO;YACL,QAAQ;YACR,eAAe,EAAE,KAAK;YACtB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE;gBACR,kBAAkB,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAClD,gBAAgB,EAAE,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACtD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;aACvF;SACF,CAAC;IACJ,CAAC;IAED,SAAS,eAAe,CAAC,MAAM;QAC7B,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,eAAe,EAAE,uBAAuB;YACxC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACjF,CAAC;IACJ,CAAC;IAED,SAAS,cAAc,CAAC,OAAO,EAAE,MAAM;QACrC,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,UAAU,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;gBAClC,KAAK,EAAE,sBAAsB;gBAC7B,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,kCAAkC;aAC7C,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO;YACL,UAAU,EAAE,uBAAuB;YACnC,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACzC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;MAaE;IACF,SAAS,IAAI,CAAC,EACZ,OAAO,GAAG,oBAAoB,EAC9B,MAAM,GAAG,IAAI,EACb,UAAU,GAAG,KAAK,EAClB,MAAM,GAAG,IAAI,EACb,KAAK,GAAG,EAAE,MAOR,EAAE;QACJ,MAAM,QAAQ,GAAG,OAAO,KAAK,OAAO;YAClC,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,qBAAqB,CAAC;QAC1B,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACzD,MAAM,OAAO,GAUT;YACF,UAAU,EAAE,GAAG,QAAQ,IAAI,EAAE,OAAO,EAAE;YACtC,OAAO,EAAE,uBAAuB;YAChC,MAAM,EAAE,YAAY;YACpB,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE;YAC3C,KAAK;SACN,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,yEAAyE;YACzE,qEAAqE;YACrE,iEAAiE;YACjE,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC/D,CAAC;aAAM,IAAI,OAAO,KAAK,oBAAoB,IAAI,MAAM,EAAE,CAAC;YACtD,2EAA2E;YAC3E,8EAA8E;YAC9E,gFAAgF;YAChF,4EAA4E;YAC5E,iFAAiF;YACjF,OAAO,CAAC,eAAe,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;oBACrE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,CAAC,MAAM,GAAG,kBAAkB,CAAC;oBAClC,UAAU;oBACV,SAAS;oBACT,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;oBACrD,UAAU,EAAE,KAAK,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC3E,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC5B,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC,mBAAmB,CAAC;YACtD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACrG,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,oDAAoD;QAC9G,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;AACxI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,GAAG,oBAAoB,EAAE,MAAM,GAAG,kBAAkB,EAAE,GAAG,EAAE;IACxG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,MAAM,EAAE,EAC/D,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CACzC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAChG,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,IAAI,OAAO;YAC5C,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI;YACvD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;YAChC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;SAC3B,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AAEnG;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAC3B,MAAM,EACN,OAAO,EACP,MAAM,MAYJ,EAAE;IACJ,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzH,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAEtE,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9F,2BAA2B;IAC3B,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAExE,oDAAoD;IACpD,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,GAAG,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5F,wCAAwC;IACxC,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvF,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC9D,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;IACxC,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhD,yDAAyD;IACzD,MAAM,OAAO,GAAG,YAAY;WACvB,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB;WAClD,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,KAAK,CAAC,CAAC,YAAY,CAAC;IAC5E,GAAG,CAAC,uBAAuB,EAAE,OAAO,EAAE;QACpC,mBAAmB,EAAE,CAAC,CAAC,SAAS,EAAE,mBAAmB,IAAI,IAAI;QAC7D,aAAa,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;KACtC,CAAC,CAAC;IAEH,oCAAoC;IACpC,GAAG,CAAC,sBAAsB,EAAE,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;QACpG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI;KACnC,CAAC,CAAC;IAEH,mCAAmC;IACnC,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,gCAAgC;IAChC,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5I,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,MAAM,GAAG,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC;IAC7C,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;QACnD,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QACtD,MAAM;QACN,YAAY,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;KAC/E,CAAC;AACJ,CAAC;AAED,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/enterprise.d.ts

@@ -0,0 +1,88 @@
+export declare const ENTITLEMENT_VERSION = "EP-GATE-ENTITLEMENT-v1";
+export declare const ENTITLEMENT_TIERS: string[];
+/**
+ * Mint a signed entitlement (test/ops helper — the licensing service, not the
+ * verifier, holds the private key). Throws on invalid fields: a malformed
+ * license must never be issued, only refused.
+ * @param {crypto.KeyObject} privateKey Ed25519 private key
+ * @param {object} fields { org, tier, features?, limits?, not_before, expires_at, kid }
+ * @returns {{ '@version': string, payload: object, signature: { algorithm: 'Ed25519', value: string } }}
+ */
+export declare function mintEntitlement(privateKey: any, { org, tier, features, limits, not_before, expires_at, kid, }: {
+    org: string;
+    tier: string;
+    features?: string[];
+    limits?: Record<string, any>;
+    not_before: string | number;
+    expires_at: string | number;
+    kid: string;
+}): {
+    '@version': string;
+    payload: {
+        org: string;
+        tier: string;
+        features: string[];
+        limits: Record<string, any>;
+        not_before: string | number;
+        expires_at: string | number;
+        kid: string;
+    };
+    signature: {
+        algorithm: string;
+        value: string;
+    };
+};
+/**
+ * Verify an entitlement. NEVER throws for a bad artifact — every failure
+ * resolves to the community tier with a machine-readable reason, so a licensing
+ * problem degrades gracefully instead of bricking the gate. Enterprise features
+ * remain gated by `requireFeature`, which fails closed on any non-valid result.
+ *
+ * @param {object|string|null} entitlementJson the artifact (object or JSON string); absence -> community
+ * @param {object} [o]
+ * @param {object|Array<{kid:string,key:string}>} [o.issuerKeys] pinned kid -> base64url SPKI-DER public key
+ * @param {number|string|function} [o.now=Date.now] injected clock (ms, ISO, or () => ms)
+ * @returns {{ valid: boolean, tier: string, features: string[], limits: object|null, reason: string, org?: string, kid?: string, not_before?: any, expires_at?: any }}
+ */
+export declare function verifyEntitlement(entitlementJson: any, { issuerKeys, now, }?: {
+    issuerKeys?: Record<string, string> | Array<{
+        kid: string;
+        key: string;
+    }>;
+    now?: number | string | (() => number);
+}): {
+    valid: boolean;
+    tier: string;
+    features: never[];
+    limits: null;
+    reason: any;
+} | {
+    valid: boolean;
+    tier: any;
+    features: any;
+    limits: any;
+    reason: string;
+    org: any;
+    kid: any;
+    not_before: any;
+    expires_at: any;
+};
+/**
+ * Is `feature` licensed? FAIL CLOSED: true only for a valid entitlement that
+ * explicitly lists the feature. Community fallback, invalid/expired/tampered
+ * artifacts, and unlisted features are all false — no enterprise code path
+ * runs without a live license naming it.
+ * @param {object} verified the result of verifyEntitlement
+ * @param {string} feature
+ * @returns {boolean}
+ */
+export declare function requireFeature(verified: any, feature: any): any;
+declare const _default: {
+    mintEntitlement: typeof mintEntitlement;
+    verifyEntitlement: typeof verifyEntitlement;
+    requireFeature: typeof requireFeature;
+    ENTITLEMENT_VERSION: string;
+    ENTITLEMENT_TIERS: string[];
+};
+export default _default;
+//# sourceMappingURL=enterprise.d.ts.map

package/dist/enterprise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise.d.ts","sourceRoot":"","sources":["../src/enterprise.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAC5D,eAAO,MAAM,iBAAiB,UAA+D,CAAC;AA0B9F;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,UAAU,KAAA,EAAE,EAC1C,GAAG,EAAE,IAAI,EAAE,QAAa,EAAE,MAAW,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,GACnE,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;;;;;;;;;;;;;;;EAoBA;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,KAAA,EAAE,EACjD,UAAU,EACV,GAAc,GACf,GAAE;IACD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;CACnC;;;;;;;;;;;;;;;;EAwDL;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,QAAQ,KAAA,EAAE,OAAO,KAAA,OAI/C;;;;;;;;AAED,wBAA8G"}

package/dist/enterprise.js

@@ -0,0 +1,194 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — enterprise entitlement layer (EP-GATE-ENTITLEMENT-v1).
+ *
+ * The license key IS an EP-style artifact: a signed entitlement — Ed25519 over
+ * canonical JSON (sorted keys, same idiom as receipts/evidence) of
+ * { org, tier, features[], limits, not_before, expires_at, kid }. Verifiers pin
+ * issuer keys by kid; nothing in the artifact is trusted until the signature
+ * verifies against a pinned key.
+ *
+ * OPEN-CORE SEMANTICS — two different fail directions, by design:
+ *   - The CORE gate is never bricked. No entitlement, an expired one, a
+ *     tampered one, an unknown kid — all resolve to { valid:false,
+ *     tier:'community' } with a machine-readable reason. Community tier always
+ *     works; a licensing failure can never block the firewall itself.
+ *   - Enterprise FEATURES fail closed. `requireFeature` returns true ONLY for
+ *     a cryptographically valid, in-window entitlement that explicitly lists
+ *     the feature. Everything else — including community fallback — is false.
+ *
+ * Pure functions: inputs in, verdict out. Time is injected (`now`), never read
+ * from the wall clock implicitly, so verification is deterministic.
+ */
+import crypto from 'node:crypto';
+import { strictJsonGate } from './strict-json.js';
+export const ENTITLEMENT_VERSION = 'EP-GATE-ENTITLEMENT-v1';
+export const ENTITLEMENT_TIERS = ['community', 'team', 'business', 'enterprise', 'regulated'];
+/** The tier every failure path resolves to — the gate keeps working on it. */
+const COMMUNITY = 'community';
+/** Canonical JSON (recursive sorted keys) — matches @emilia-protocol/verify. */
+function canonical(v) {
+    if (v === null || v === undefined)
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return `[${v.map(canonical).join(',')}]`;
+    if (typeof v === 'object') {
+        return `{${Object.keys(v).sort().map((k) => JSON.stringify(k) + ':' + canonical(v[k])).join(',')}}`;
+    }
+    return JSON.stringify(v);
+}
+function toMs(t) {
+    if (t == null)
+        return null;
+    const ms = typeof t === 'number' ? t : Date.parse(t);
+    return Number.isFinite(ms) ? ms : null;
+}
+/** Community fallback — every refusal shape is identical and machine-readable. */
+function community(reason, extra = {}) {
+    return { valid: false, tier: COMMUNITY, features: [], limits: null, reason, ...extra };
+}
+/**
+ * Mint a signed entitlement (test/ops helper — the licensing service, not the
+ * verifier, holds the private key). Throws on invalid fields: a malformed
+ * license must never be issued, only refused.
+ * @param {crypto.KeyObject} privateKey Ed25519 private key
+ * @param {object} fields { org, tier, features?, limits?, not_before, expires_at, kid }
+ * @returns {{ '@version': string, payload: object, signature: { algorithm: 'Ed25519', value: string } }}
+ */
+export function mintEntitlement(privateKey, { org, tier, features = [], limits = {}, not_before, expires_at, kid, }) {
+    if (!org || typeof org !== 'string')
+        throw new Error('entitlement: org is required');
+    if (!ENTITLEMENT_TIERS.includes(tier)) {
+        throw new Error(`entitlement: unknown tier "${tier}" (expected one of ${ENTITLEMENT_TIERS.join('|')})`);
+    }
+    if (!Array.isArray(features) || features.some((f) => typeof f !== 'string')) {
+        throw new Error('entitlement: features must be an array of strings');
+    }
+    if (!limits || typeof limits !== 'object' || Array.isArray(limits)) {
+        throw new Error('entitlement: limits must be an object');
+    }
+    if (toMs(not_before) == null)
+        throw new Error('entitlement: not_before is required (ISO or ms)');
+    if (toMs(expires_at) == null)
+        throw new Error('entitlement: expires_at is required (ISO or ms)');
+    if (!kid || typeof kid !== 'string')
+        throw new Error('entitlement: kid is required');
+    // Snapshot features/limits into the signed payload: embedding the caller's live
+    // array/object would let a licensing service mutate them after minting and
+    // diverge the entitlement from its signature.
+    const payload = { org, tier, features: structuredClone(features), limits: structuredClone(limits), not_before, expires_at, kid };
+    const value = crypto.sign(null, Buffer.from(canonical(payload), 'utf8'), privateKey).toString('base64url');
+    return { '@version': ENTITLEMENT_VERSION, payload, signature: { algorithm: 'Ed25519', value } };
+}
+/** Resolve a base64url SPKI-DER key for `kid` from a map or an entry list. */
+function issuerKeyFor(issuerKeys, kid) {
+    if (!issuerKeys)
+        return null;
+    if (Array.isArray(issuerKeys)) {
+        const e = issuerKeys.find((x) => x && x.kid === kid && typeof x.key === 'string');
+        return e ? e.key : null;
+    }
+    const k = issuerKeys[kid];
+    return typeof k === 'string' ? k : null;
+}
+/**
+ * Verify an entitlement. NEVER throws for a bad artifact — every failure
+ * resolves to the community tier with a machine-readable reason, so a licensing
+ * problem degrades gracefully instead of bricking the gate. Enterprise features
+ * remain gated by `requireFeature`, which fails closed on any non-valid result.
+ *
+ * @param {object|string|null} entitlementJson the artifact (object or JSON string); absence -> community
+ * @param {object} [o]
+ * @param {object|Array<{kid:string,key:string}>} [o.issuerKeys] pinned kid -> base64url SPKI-DER public key
+ * @param {number|string|function} [o.now=Date.now] injected clock (ms, ISO, or () => ms)
+ * @returns {{ valid: boolean, tier: string, features: string[], limits: object|null, reason: string, org?: string, kid?: string, not_before?: any, expires_at?: any }}
+ */
+export function verifyEntitlement(entitlementJson, { issuerKeys, now = Date.now, } = {}) {
+    // Absence is NOT an error: the open-core floor. Community keeps working.
+    if (entitlementJson == null || entitlementJson === '')
+        return community('no_entitlement');
+    let doc = entitlementJson;
+    if (typeof doc === 'string') {
+        try {
+            if (Buffer.byteLength(doc, 'utf8') > 1024 * 1024 || !strictJsonGate(doc).ok)
+                return community('entitlement_unparseable');
+            doc = JSON.parse(doc);
+        }
+        catch {
+            return community('entitlement_unparseable');
+        }
+    }
+    if (!doc || typeof doc !== 'object' || Array.isArray(doc))
+        return community('entitlement_malformed');
+    if (doc['@version'] !== ENTITLEMENT_VERSION)
+        return community('unsupported_version');
+    const p = doc.payload;
+    const sig = doc.signature;
+    if (!p || typeof p !== 'object' || !sig || typeof sig !== 'object')
+        return community('entitlement_malformed');
+    if (sig.algorithm !== 'Ed25519' || typeof sig.value !== 'string')
+        return community('unsupported_algorithm');
+    if (!ENTITLEMENT_TIERS.includes(p.tier))
+        return community('unknown_tier');
+    if (!Array.isArray(p.features) || p.features.some((f) => typeof f !== 'string'))
+        return community('entitlement_malformed');
+    // Issuer pinning: the kid must resolve to a PINNED key. An entitlement can
+    // never nominate its own key — unknown kid (or no pins at all) fails closed.
+    const keyB64 = issuerKeyFor(issuerKeys, p.kid);
+    if (!keyB64)
+        return community('unknown_kid', { kid: p.kid ?? null });
+    let ok = false;
+    try {
+        const pub = crypto.createPublicKey({ key: Buffer.from(keyB64, 'base64url'), format: 'der', type: 'spki' });
+        ok = crypto.verify(null, Buffer.from(canonical(p), 'utf8'), pub, Buffer.from(sig.value, 'base64url'));
+    }
+    catch {
+        ok = false;
+    }
+    // One reason covers both tampering and a wrong key: the signature does not
+    // verify against the pinned key for this kid.
+    if (!ok)
+        return community('bad_signature', { kid: p.kid });
+    // Validity window — checked only AFTER the signature, so the timestamps
+    // themselves are authenticated. Both bounds are required; an unparseable
+    // window fails closed.
+    const nowMs = typeof now === 'function' ? now() : toMs(now);
+    const nbf = toMs(p.not_before);
+    const exp = toMs(p.expires_at);
+    if (nbf == null || exp == null || nowMs == null)
+        return community('invalid_validity_window', { kid: p.kid });
+    if (nowMs < nbf)
+        return community('not_yet_valid', { kid: p.kid, not_before: p.not_before });
+    if (nowMs > exp)
+        return community('expired', { kid: p.kid, expires_at: p.expires_at });
+    return {
+        valid: true,
+        tier: p.tier,
+        features: p.features.slice(),
+        limits: (p.limits && typeof p.limits === 'object') ? { ...p.limits } : {},
+        reason: 'entitlement_verified',
+        org: p.org,
+        kid: p.kid,
+        not_before: p.not_before,
+        expires_at: p.expires_at,
+    };
+}
+/**
+ * Is `feature` licensed? FAIL CLOSED: true only for a valid entitlement that
+ * explicitly lists the feature. Community fallback, invalid/expired/tampered
+ * artifacts, and unlisted features are all false — no enterprise code path
+ * runs without a live license naming it.
+ * @param {object} verified the result of verifyEntitlement
+ * @param {string} feature
+ * @returns {boolean}
+ */
+export function requireFeature(verified, feature) {
+    if (!verified || verified.valid !== true)
+        return false;
+    if (typeof feature !== 'string' || feature.length === 0)
+        return false;
+    return Array.isArray(verified.features) && verified.features.includes(feature);
+}
+export default { mintEntitlement, verifyEntitlement, requireFeature, ENTITLEMENT_VERSION, ENTITLEMENT_TIERS };
+//# sourceMappingURL=enterprise.js.map

package/dist/enterprise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enterprise.js","sourceRoot":"","sources":["../src/enterprise.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAE9F,8EAA8E;AAC9E,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B,gFAAgF;AAChF,SAAS,SAAS,CAAC,CAAC;IAClB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,IAAI,CAAC,CAAC;IACb,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,MAAM,EAAE,KAAK,GAAG,EAAE;IACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,UAAU,EAAE,EAC1C,GAAG,EAAE,IAAI,EAAE,QAAQ,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,GASnE;IACC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,sBAAsB,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjG,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrF,gFAAgF;IAChF,2EAA2E;IAC3E,8CAA8C;IAC9C,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACjI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3G,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,UAAU,EAAE,GAAG;IACnC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,eAAe,EAAE,EACjD,UAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,MAIZ,EAAE;IACJ,yEAAyE;IACzE,IAAI,eAAe,IAAI,IAAI,IAAI,eAAe,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAE1F,IAAI,GAAG,GAAG,eAAe,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC,yBAAyB,CAAC,CAAC;YACzH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACrG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,mBAAmB;QAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAErF,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9G,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC5G,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAE3H,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IAErE,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3G,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QAAC,EAAE,GAAG,KAAK,CAAC;IAAC,CAAC;IACvB,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3D,wEAAwE;IACxE,yEAAyE;IACzE,uBAAuB;IACvB,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/B,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7G,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7F,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAEvF,OAAO;QACL,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;QACzE,MAAM,EAAE,sBAAsB;QAC9B,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ,EAAE,OAAO;IAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjF,CAAC;AAED,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/evidence-postgres.d.ts

@@ -0,0 +1,123 @@
+/**
+ * EMILIA Gate production evidence backend for Postgres.
+ *
+ * The deployment SQL exposes one SECURITY DEFINER append function. That
+ * function locks the tenant/gate/stream head, checks the caller's expected
+ * head, inserts one immutable record, and advances the head in the same SQL
+ * statement transaction. Runtime roles receive SELECT and EXECUTE only; they
+ * cannot insert, update, delete, or truncate evidence tables directly.
+ *
+ * Database errors and malformed driver responses always propagate on the
+ * write path. A storage outage must never be mistaken for a successful append
+ * or an ordinary contention retry.
+ */
+export declare const PG_EVIDENCE_VERSION = "EP-GATE-PG-EVIDENCE-v1";
+export declare const EVIDENCE_SCHEMA = "emilia_gate_evidence";
+export declare const EVIDENCE_RECORDS_TABLE = "emilia_gate_evidence.records";
+export declare const EVIDENCE_HEADS_TABLE = "emilia_gate_evidence.heads";
+export declare const EVIDENCE_APPEND_FUNCTION = "emilia_gate_evidence.append_record";
+/** Exact statements issued by the adapter, exported for audit and test fakes. */
+export declare const EVIDENCE_SQL: Readonly<{
+    health: "SELECT\n  to_regclass('emilia_gate_evidence.records') IS NOT NULL AS records_ready,\n  to_regclass('emilia_gate_evidence.heads') IS NOT NULL AS heads_ready,\n  to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)') IS NOT NULL AS append_ready,\n  CASE WHEN to_regclass('emilia_gate_evidence.records') IS NULL THEN FALSE\n    ELSE has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'SELECT') END AS can_read_records,\n  CASE WHEN to_regclass('emilia_gate_evidence.heads') IS NULL THEN FALSE\n    ELSE has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'SELECT') END AS can_read_heads,\n  CASE WHEN to_regclass('emilia_gate_evidence.records') IS NULL THEN FALSE ELSE (\n    has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'INSERT')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'UPDATE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'DELETE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'TRUNCATE')\n  ) END AS can_write_records_directly,\n  CASE WHEN to_regclass('emilia_gate_evidence.heads') IS NULL THEN FALSE ELSE (\n    has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'INSERT')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'UPDATE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'DELETE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'TRUNCATE')\n  ) END AS can_write_heads_directly,\n  CASE WHEN to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)') IS NULL THEN FALSE\n    ELSE has_function_privilege(current_user,\n      to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)'), 'EXECUTE') END AS can_append";
+    readHead: "SELECT head_seq AS seq, head_hash AS hash\nFROM emilia_gate_evidence.heads\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3";
+    getById: "SELECT seq, record_id, prev_hash, hash, record\nFROM emilia_gate_evidence.records\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3 AND record_id = $4";
+    readAll: "SELECT seq, record_id, prev_hash, hash, record\nFROM emilia_gate_evidence.records\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3\nORDER BY seq ASC";
+    snapshot: "SELECT\n  COALESCE((\n    SELECT jsonb_agg(jsonb_build_object(\n      'seq', r.seq,\n      'record_id', r.record_id,\n      'prev_hash', r.prev_hash,\n      'hash', r.hash,\n      'record', r.record\n    ) ORDER BY r.seq ASC)\n    FROM emilia_gate_evidence.records r\n    WHERE r.tenant_id = $1 AND r.gate_id = $2 AND r.stream_id = $3\n  ), '[]'::jsonb) AS record_rows,\n  (\n    SELECT CASE WHEN h.head_seq = -1 THEN NULL ELSE jsonb_build_object(\n      'seq', h.head_seq, 'hash', h.head_hash\n    ) END\n    FROM emilia_gate_evidence.heads h\n    WHERE h.tenant_id = $1 AND h.gate_id = $2 AND h.stream_id = $3\n  ) AS head";
+    appendIfHead: "SELECT emilia_gate_evidence.append_record($1, $2, $3, $4, $5::jsonb, $6) AS appended";
+}>;
+/**
+ * Create a tenant-and-gate-bound backend for createAtomicEvidenceLog().
+ *
+ * `query` is a node-postgres style function such as `pool.query.bind(pool)`.
+ * The migration must be installed and the connection role must inherit or SET
+ * ROLE to `emilia_gate_evidence_runtime`.
+ *
+ * @param {{ query?: (text: string, params: any[]) => Promise<{ rowCount: number, rows?: any[] }>, tenantId?: any, gateId?: any }} [options]
+ */
+export declare function createPostgresEvidenceBackend({ query, tenantId, gateId, }?: {
+    query?: (text: string, params: any[]) => Promise<{
+        rowCount: number;
+        rows?: any[];
+    }>;
+    tenantId?: string;
+    gateId?: string;
+}): {
+    durable: boolean;
+    persisted: boolean;
+    strict: boolean;
+    forkAware: boolean;
+    atomicAppend: boolean;
+    appendOnly: boolean;
+    version: string;
+    scope: Readonly<{
+        tenantId: string;
+        gateId: string;
+    }>;
+    readHead: (streamId: any) => Promise<{
+        seq: any;
+        hash: any;
+    } | null>;
+    head: (streamId: any) => Promise<{
+        seq: any;
+        hash: any;
+    } | null>;
+    getById: (streamId: any, recordId: any) => Promise<any>;
+    appendIfHead: (streamId: any, expectedHeadHash: any, record: any) => Promise<any>;
+    readAll: (streamId: any) => Promise<any>;
+    all: (streamId: any) => Promise<any>;
+    verify(streamId: any): Promise<{
+        ok: boolean;
+        at: any;
+        reason: string;
+        length?: undefined;
+        head?: undefined;
+    } | {
+        ok: boolean;
+        reason: string;
+        at?: undefined;
+        length?: undefined;
+        head?: undefined;
+    } | {
+        ok: boolean;
+        length: any;
+        head: string | null;
+        at?: undefined;
+        reason?: undefined;
+    }>;
+    health(): Promise<{
+        ok: boolean;
+        version: string;
+        scope: Readonly<{
+            tenantId: string;
+            gateId: string;
+        }>;
+        checks: {
+            recordsReady: boolean;
+            headsReady: boolean;
+            appendReady: boolean;
+            canReadRecords: boolean;
+            canReadHeads: boolean;
+            noDirectRecordWrites: boolean;
+            noDirectHeadWrites: boolean;
+            canAppend: boolean;
+        };
+    }>;
+};
+declare const postgresEvidence: {
+    createPostgresEvidenceBackend: typeof createPostgresEvidenceBackend;
+    EVIDENCE_SQL: Readonly<{
+        health: "SELECT\n  to_regclass('emilia_gate_evidence.records') IS NOT NULL AS records_ready,\n  to_regclass('emilia_gate_evidence.heads') IS NOT NULL AS heads_ready,\n  to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)') IS NOT NULL AS append_ready,\n  CASE WHEN to_regclass('emilia_gate_evidence.records') IS NULL THEN FALSE\n    ELSE has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'SELECT') END AS can_read_records,\n  CASE WHEN to_regclass('emilia_gate_evidence.heads') IS NULL THEN FALSE\n    ELSE has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'SELECT') END AS can_read_heads,\n  CASE WHEN to_regclass('emilia_gate_evidence.records') IS NULL THEN FALSE ELSE (\n    has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'INSERT')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'UPDATE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'DELETE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.records'), 'TRUNCATE')\n  ) END AS can_write_records_directly,\n  CASE WHEN to_regclass('emilia_gate_evidence.heads') IS NULL THEN FALSE ELSE (\n    has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'INSERT')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'UPDATE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'DELETE')\n    OR has_table_privilege(current_user, to_regclass('emilia_gate_evidence.heads'), 'TRUNCATE')\n  ) END AS can_write_heads_directly,\n  CASE WHEN to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)') IS NULL THEN FALSE\n    ELSE has_function_privilege(current_user,\n      to_regprocedure('emilia_gate_evidence.append_record(text,text,text,text,jsonb,text)'), 'EXECUTE') END AS can_append";
+        readHead: "SELECT head_seq AS seq, head_hash AS hash\nFROM emilia_gate_evidence.heads\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3";
+        getById: "SELECT seq, record_id, prev_hash, hash, record\nFROM emilia_gate_evidence.records\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3 AND record_id = $4";
+        readAll: "SELECT seq, record_id, prev_hash, hash, record\nFROM emilia_gate_evidence.records\nWHERE tenant_id = $1 AND gate_id = $2 AND stream_id = $3\nORDER BY seq ASC";
+        snapshot: "SELECT\n  COALESCE((\n    SELECT jsonb_agg(jsonb_build_object(\n      'seq', r.seq,\n      'record_id', r.record_id,\n      'prev_hash', r.prev_hash,\n      'hash', r.hash,\n      'record', r.record\n    ) ORDER BY r.seq ASC)\n    FROM emilia_gate_evidence.records r\n    WHERE r.tenant_id = $1 AND r.gate_id = $2 AND r.stream_id = $3\n  ), '[]'::jsonb) AS record_rows,\n  (\n    SELECT CASE WHEN h.head_seq = -1 THEN NULL ELSE jsonb_build_object(\n      'seq', h.head_seq, 'hash', h.head_hash\n    ) END\n    FROM emilia_gate_evidence.heads h\n    WHERE h.tenant_id = $1 AND h.gate_id = $2 AND h.stream_id = $3\n  ) AS head";
+        appendIfHead: "SELECT emilia_gate_evidence.append_record($1, $2, $3, $4, $5::jsonb, $6) AS appended";
+    }>;
+    EVIDENCE_SCHEMA: string;
+    EVIDENCE_RECORDS_TABLE: string;
+    EVIDENCE_HEADS_TABLE: string;
+    EVIDENCE_APPEND_FUNCTION: string;
+    PG_EVIDENCE_VERSION: string;
+};
+export default postgresEvidence;
+//# sourceMappingURL=evidence-postgres.d.ts.map

package/dist/evidence-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-postgres.d.ts","sourceRoot":"","sources":["../src/evidence-postgres.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAOH,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAC5D,eAAO,MAAM,eAAe,yBAAyB,CAAC;AACtD,eAAO,MAAM,sBAAsB,iCAA+B,CAAC;AACnE,eAAO,MAAM,oBAAoB,+BAA6B,CAAC;AAC/D,eAAO,MAAM,wBAAwB,uCAAqC,CAAC;AAO3E,iFAAiF;AACjF,eAAO,MAAM,YAAY;;;;;;;EA4DvB,CAAC;AA8IH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,EAC5C,KAAK,EACL,QAAQ,EACR,MAAM,GACP,GAAE;IACD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;KAAE,CAAC,CAAC;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8GL;AAED,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;CAQrB,CAAC;AAEF,eAAe,gBAAgB,CAAC"}