@emilia-protocol/gate 0.11.0 → 0.14.0

package/dist/trust-program-revocation.d.ts

@@ -0,0 +1,206 @@
+export declare const TRUST_PROGRAM_REVOCATION_TARGET_VERSION = "EP-GATE-TRUST-PROGRAM-REVOCATION-TARGET-v1";
+type DataRecord = Record<string, any>;
+export interface TrustProgramReceiptContext {
+    issuer: string;
+    tenant: string;
+    environment: string;
+    audience: string;
+    key_id: string;
+}
+export interface TrustProgramExecutionAuthorizationBinding {
+    instance_id: string;
+    operation_id: string;
+    program_digest: string;
+    root_caid: string;
+    action_digest: string;
+    receipt_context_digest: string;
+    terminal_stage_receipt_digests: string[];
+    consequence_mode: 'receipt-program' | 'action-escrow';
+    capability_template_digest: string | null;
+    escrow_profile_digest: string | null;
+}
+export interface TrustProgramRevocationDerivationInput {
+    authorizationBinding: TrustProgramExecutionAuthorizationBinding;
+    programVersion: number;
+    receiptContext: TrustProgramReceiptContext;
+}
+export interface TrustProgramRevocationTargetObject {
+    '@version': typeof TRUST_PROGRAM_REVOCATION_TARGET_VERSION;
+    instance_id: string;
+    program_digest: string;
+    program_version: number;
+    root_caid: string;
+    action_digest: string;
+    operation_id: string;
+    receipt_context_digest: string;
+    terminal_stage_receipt_digests: readonly string[];
+    consequence_mode: 'receipt-program' | 'action-escrow';
+    capability_template_digest: string | null;
+    escrow_profile_digest: string | null;
+}
+export interface TrustProgramRevocationTarget {
+    target_type: 'commit';
+    target_id: string;
+    action_hash: string;
+}
+export interface TrustProgramRevocationVerificationInput extends TrustProgramRevocationDerivationInput {
+    statement: unknown;
+    revokerKeys: Record<string, {
+        public_key: string;
+        key_id?: string;
+    }>;
+    now: number | string | Date;
+}
+export interface TrustProgramRevocationKernel {
+    status(instanceId: string): Promise<unknown>;
+    invalidate(input: {
+        instanceId: string;
+        expectedRevision: number;
+        reason: string;
+    }): Promise<unknown>;
+}
+export interface TrustProgramRevocationApplyInput extends TrustProgramRevocationVerificationInput {
+    expectedRevision: number;
+    kernel: TrustProgramRevocationKernel;
+}
+/** Derive the complete closed projection whose JCS SHA-256 is action_hash. */
+export declare function deriveTrustProgramRevocationTargetObject(input: TrustProgramRevocationDerivationInput): Readonly<TrustProgramRevocationTargetObject>;
+/** Derive the EP-REVOCATION-v1 commit target; no statement field is consulted. */
+export declare function deriveTrustProgramRevocationTarget(input: TrustProgramRevocationDerivationInput): Readonly<TrustProgramRevocationTarget>;
+export declare function verifyTrustProgramRevocation(input: TrustProgramRevocationVerificationInput): {
+    valid: boolean;
+    checks: {
+        target_derived: boolean;
+        statement_structure: boolean;
+        pinned_verifier_inputs: boolean;
+        portable_verifier_completed: boolean;
+    };
+    errors: string[];
+    target: Readonly<TrustProgramRevocationTarget> | null;
+    target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+};
+export declare function applyTrustProgramRevocation(input: TrustProgramRevocationApplyInput): Promise<{
+    verified: boolean;
+    applied: boolean;
+    blocks_claim: boolean;
+    claim_permitted: boolean;
+    future_authority_only: boolean;
+    retry_required: boolean;
+    must_fail_closed: boolean;
+    disposition: "refused";
+    reason: string;
+    verification: {
+        valid: boolean;
+        checks: {
+            target_derived: boolean;
+            statement_structure: boolean;
+            pinned_verifier_inputs: boolean;
+            portable_verifier_completed: boolean;
+        };
+        errors: string[];
+        target: Readonly<TrustProgramRevocationTarget> | null;
+        target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+    } | null;
+    state: null;
+} | {
+    verified: boolean;
+    applied: boolean;
+    blocks_claim: boolean;
+    claim_permitted: boolean;
+    future_authority_only: boolean;
+    retry_required: boolean;
+    must_fail_closed: boolean;
+    disposition: "late_future_authority_only";
+    reason: string;
+    verification: {
+        valid: boolean;
+        checks: {
+            target_derived: boolean;
+            statement_structure: boolean;
+            pinned_verifier_inputs: boolean;
+            portable_verifier_completed: boolean;
+        };
+        errors: string[];
+        target: Readonly<TrustProgramRevocationTarget> | null;
+        target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+    };
+    state: unknown;
+} | {
+    verified: boolean;
+    applied: boolean;
+    blocks_claim: boolean;
+    claim_permitted: boolean;
+    future_authority_only: boolean;
+    retry_required: boolean;
+    must_fail_closed: boolean;
+    disposition: "indeterminate_retry_required";
+    reason: string;
+    verification: {
+        valid: boolean;
+        checks: {
+            target_derived: boolean;
+            statement_structure: boolean;
+            pinned_verifier_inputs: boolean;
+            portable_verifier_completed: boolean;
+        };
+        errors: string[];
+        target: Readonly<TrustProgramRevocationTarget> | null;
+        target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+    };
+    state: unknown;
+} | {
+    verified: boolean;
+    applied: boolean;
+    blocks_claim: boolean;
+    claim_permitted: boolean;
+    future_authority_only: boolean;
+    retry_required: boolean;
+    must_fail_closed: boolean;
+    disposition: "already_invalidated";
+    reason: string;
+    verification: {
+        valid: boolean;
+        checks: {
+            target_derived: boolean;
+            statement_structure: boolean;
+            pinned_verifier_inputs: boolean;
+            portable_verifier_completed: boolean;
+        };
+        errors: string[];
+        target: Readonly<TrustProgramRevocationTarget> | null;
+        target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+    };
+    state: DataRecord;
+} | {
+    verified: boolean;
+    applied: boolean;
+    blocks_claim: boolean;
+    claim_permitted: boolean;
+    future_authority_only: boolean;
+    retry_required: boolean;
+    must_fail_closed: boolean;
+    disposition: "invalidated_before_claim";
+    reason: string;
+    verification: {
+        valid: boolean;
+        checks: {
+            target_derived: boolean;
+            statement_structure: boolean;
+            pinned_verifier_inputs: boolean;
+            portable_verifier_completed: boolean;
+        };
+        errors: string[];
+        target: Readonly<TrustProgramRevocationTarget> | null;
+        target_object: Readonly<TrustProgramRevocationTargetObject> | null;
+    };
+    state: DataRecord;
+}>;
+declare const _default: {
+    TRUST_PROGRAM_REVOCATION_TARGET_VERSION: string;
+    deriveTrustProgramRevocationTargetObject: typeof deriveTrustProgramRevocationTargetObject;
+    deriveTrustProgramRevocationTarget: typeof deriveTrustProgramRevocationTarget;
+    verifyTrustProgramRevocation: typeof verifyTrustProgramRevocation;
+    applyTrustProgramRevocation: typeof applyTrustProgramRevocation;
+};
+export default _default;
+//# sourceMappingURL=trust-program-revocation.d.ts.map

package/dist/trust-program-revocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-program-revocation.d.ts","sourceRoot":"","sources":["../src/trust-program-revocation.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,uCAAuC,+CACN,CAAC;AA2C/C,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,yCAAyC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,EAAE,CAAC;IACzC,gBAAgB,EAAE,iBAAiB,GAAG,eAAe,CAAC;IACtD,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,qCAAqC;IACpD,oBAAoB,EAAE,yCAAyC,CAAC;IAChE,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,OAAO,uCAAuC,CAAC;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,gBAAgB,EAAE,iBAAiB,GAAG,eAAe,CAAC;IACtD,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,QAAQ,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uCACf,SAAQ,qCAAqC;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,UAAU,CAAC,KAAK,EAAE;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,gCACf,SAAQ,uCAAuC;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,4BAA4B,CAAC;CACtC;AAqLD,8EAA8E;AAC9E,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,qCAAqC,GAC3C,QAAQ,CAAC,kCAAkC,CAAC,CAO9C;AAED,kFAAkF;AAClF,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,qCAAqC,GAC3C,QAAQ,CAAC,4BAA4B,CAAC,CAOxC;AAgKD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,uCAAuC;;;;;;;;;;;EAS1F;AA6OD,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAMxF;;;;;;;;AAED,wBAME"}