@emilia-protocol/gate 0.11.0 → 0.14.0

package/dist/trust-program.d.ts

@@ -0,0 +1,197 @@
+/**
+ * EMILIA Gate Trust Program Profile v1.
+ *
+ * A relying-party-controlled, fail-closed authorization DAG for consequential
+ * actions. This module composes evidence verifiers; it does not redefine the
+ * Handshake, Quorum, AEC, capability, or Action Escrow wire formats.
+ */
+import crypto from 'node:crypto';
+export declare const TRUST_PROGRAM_VERSION = "EP-GATE-TRUST-PROGRAM-PROFILE-v1";
+export declare const TRUST_STAGE_RECEIPT_VERSION = "EP-GATE-TRUST-STAGE-RECEIPT-v1";
+export type TrustJson = null | boolean | number | string | TrustJson[] | {
+    [key: string]: TrustJson;
+};
+export interface TrustProgramState extends Record<string, unknown> {
+    tenant_id: string;
+    instance_id: string;
+    program_digest: string;
+    root_caid: string;
+    action_digest: string;
+    status: string;
+    revision: number;
+    stages: Record<string, Record<string, unknown>>;
+    execution: Record<string, unknown>;
+}
+export interface TrustProgramResult extends Record<string, unknown> {
+    ok: boolean;
+    reason?: string;
+    state?: TrustProgramState;
+}
+export interface TrustProgramStore {
+    readonly durable: boolean;
+    create(input: {
+        tenantId: string;
+        state: TrustProgramState;
+    }): Promise<TrustProgramResult>;
+    get(input: {
+        tenantId: string;
+        instanceId: string;
+    }): Promise<TrustProgramResult>;
+    compareAndSwap(input: {
+        tenantId: string;
+        instanceId: string;
+        expectedRevision: number;
+        state: TrustProgramState;
+    }): Promise<TrustProgramResult>;
+    invalidate(input: {
+        tenantId: string;
+        instanceId: string;
+        expectedRevision: number;
+        reason: string;
+        at: number;
+    }): Promise<TrustProgramResult>;
+}
+export interface TrustEvidenceProjection extends Record<string, unknown> {
+    valid: boolean;
+    reason?: string | null;
+    binding_digest?: string;
+    policy_digest?: string;
+    subjects?: string[];
+    key_fingerprints?: string[];
+    issued_at?: string;
+    expires_at?: string;
+    revocation_checked_at?: string | null;
+}
+export type TrustEvidenceVerifier = (input: {
+    artifact: unknown;
+    requirement: Readonly<Record<string, unknown>>;
+    program: Readonly<Record<string, unknown>>;
+}) => Promise<TrustEvidenceProjection> | TrustEvidenceProjection;
+export interface TrustProgramKernelConfig {
+    program: unknown;
+    store: TrustProgramStore;
+    verifiers: Readonly<Record<string, TrustEvidenceVerifier>>;
+    receiptPrivateKey?: crypto.KeyLike;
+    receiptVerificationKey?: string | crypto.KeyObject;
+    receiptSigner?: (input: {
+        signingBytes: Buffer;
+        body: Readonly<Record<string, unknown>>;
+        receiptDigest: string;
+    }) => Promise<string> | string;
+    receiptContext: Readonly<{
+        issuer: string;
+        tenant: string;
+        environment: string;
+        audience: string;
+        key_id: string;
+    }>;
+    allowEphemeralState?: boolean;
+    actionBindingVerifier?: (input: Readonly<Record<string, unknown>>) => Promise<boolean> | boolean;
+    executionBindingVerifier?: (input: Readonly<Record<string, unknown>>) => Promise<boolean> | boolean;
+    executionEvidenceRevalidator?: (input: Readonly<Record<string, unknown>>) => Promise<boolean> | boolean;
+    executionOutcomeVerifier?: (input: Readonly<Record<string, unknown>>) => Promise<boolean> | boolean;
+    reconciliationVerifier?: (input: Readonly<Record<string, unknown>>) => Promise<boolean> | boolean;
+    now?: () => number;
+}
+export interface TrustProgramKernel {
+    readonly program_digest: string;
+    start(input: {
+        instanceId: string;
+        action?: unknown;
+    }): Promise<TrustProgramResult>;
+    status(instanceId: string): Promise<TrustProgramResult>;
+    challenge(input: {
+        instanceId: string;
+        stageId: string;
+        requirementId: string;
+    }): Promise<TrustProgramResult>;
+    admit(input: {
+        instanceId: string;
+        stageId: string;
+        requirementId: string;
+        artifact: unknown;
+    }): Promise<TrustProgramResult>;
+    claimExecution(input: {
+        instanceId: string;
+        operationId?: string;
+        claimToken?: string;
+    }): Promise<TrustProgramResult>;
+    finalizeExecution(input: {
+        instanceId: string;
+        claimToken: string;
+        outcome: 'executed' | 'refused' | 'indeterminate';
+        evidenceDigest: string;
+        evidence?: unknown;
+    }): Promise<TrustProgramResult>;
+    reconcileExecution(input: {
+        instanceId: string;
+        outcome: 'executed' | 'proved_no_effect';
+        evidenceDigest: string;
+        evidence?: unknown;
+    }): Promise<TrustProgramResult>;
+    invalidate(input: {
+        instanceId: string;
+        expectedRevision: number;
+        reason: string;
+    }): Promise<TrustProgramResult>;
+}
+/** Validate the closed, bounded DAG before any state is created. */
+export declare function validateTrustProgram(program: unknown): {
+    valid: boolean;
+    reason: string;
+    digest: null;
+} | {
+    valid: boolean;
+    reason: null;
+    digest: string;
+};
+export declare function trustProgramDigest(program: unknown): string;
+/** Independently verify one stage receipt and optional relying-party bindings. */
+export declare function verifyTrustStageReceipt(receipt: unknown, options?: {
+    trustedKeys?: Readonly<Record<string, string | crypto.KeyObject>>;
+    expected?: Readonly<Record<string, unknown>>;
+    expectedIssuer?: Readonly<Record<string, unknown>>;
+}): {
+    valid: boolean;
+    reason: string;
+    checks: {
+        structure: boolean;
+        digest: boolean;
+        key: boolean;
+        signature: boolean;
+        issuer: boolean;
+        expected: boolean;
+    };
+    receipt_digest?: undefined;
+    payload?: undefined;
+} | {
+    valid: boolean;
+    reason: null;
+    checks: {
+        structure: boolean;
+        digest: boolean;
+        key: boolean;
+        signature: boolean;
+        issuer: boolean;
+        expected: boolean;
+    };
+    receipt_digest: any;
+    payload: any;
+};
+/**
+ * In-process compare-and-swap store. Deliberately rejected by the kernel unless
+ * allowEphemeralState is explicit; production must use a durable atomic store.
+ */
+export declare function createMemoryTrustProgramStore(): TrustProgramStore;
+export declare function createTrustProgramKernel(options: TrustProgramKernelConfig): TrustProgramKernel;
+declare const _default: {
+    TRUST_PROGRAM_VERSION: string;
+    TRUST_STAGE_RECEIPT_VERSION: string;
+    validateTrustProgram: typeof validateTrustProgram;
+    trustProgramDigest: typeof trustProgramDigest;
+    verifyTrustStageReceipt: typeof verifyTrustStageReceipt;
+    createMemoryTrustProgramStore: typeof createMemoryTrustProgramStore;
+    createTrustProgramKernel: typeof createTrustProgramKernel;
+};
+export default _default;
+//# sourceMappingURL=trust-program.d.ts.map

package/dist/trust-program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-program.d.ts","sourceRoot":"","sources":["../src/trust-program.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,eAAO,MAAM,qBAAqB,qCAAqC,CAAC;AACxE,eAAO,MAAM,2BAA2B,mCAAmC,CAAC;AA0D5E,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtG,MAAM,WAAW,iBAAkB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjE,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,iBAAiB,CAAC;KAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,GAAG,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClF,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,KAAK,EAAE,iBAAiB,CAAC;KAC1B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,UAAU,CAAC,KAAK,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,MAAM,CAAC;KACZ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,uBAAwB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACtE,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5C,KAAK,OAAO,CAAC,uBAAuB,CAAC,GAAG,uBAAuB,CAAC;AAEjE,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;IACnD,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC;KACvB,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,cAAc,EAAE,QAAQ,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACjG,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACpG,4BAA4B,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACxG,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IACpG,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAClG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,KAAK,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpF,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,SAAS,CAAC,KAAK,EAAE;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,KAAK,CAAC,KAAK,EAAE;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,cAAc,CAAC,KAAK,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,iBAAiB,CAAC,KAAK,EAAE;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,eAAe,CAAC;QAClD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,kBAAkB,CAAC,KAAK,EAAE;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,UAAU,GAAG,kBAAkB,CAAC;QACzC,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,UAAU,CAAC,KAAK,EAAE;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC;AAiFD,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO;;;;;;;;EAuHpD;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAI3D;AA4FD,kFAAkF;AAClF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE;IACjE,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CL;AAiQD;;;GAGG;AACH,wBAAgB,6BAA6B,IAAI,iBAAiB,CAgDjE;AAmCD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,wBAAwB,GAAG,kBAAkB,CA+iB9F;;;;;;;;;;AAED,wBAQE"}