@emilia-protocol/gate 0.6.0 → 0.7.0

package/adapters/cloudflare.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Cloudflare System-of-Record adapter.
+ * Guards DNS record delete, zone delete, and WAF/firewall disable so they never
+ * reach Cloudflare without a receipt bound to THIS zone. Client injected.
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+
+export const CLOUDFLARE_ACTION_PACK = Object.freeze([
+  Object.freeze({
+    id: 'cloudflare.dns.delete', label: 'Delete DNS record', action_type: 'cloudflare.dns.delete',
+    risk: 'high', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'cloudflare', tool: 'delete_dns_record' },
+    why: 'Removing DNS can take a service offline or enable takeover. Bind zone+record.',
+    execution_binding: { required_fields: ['action_type', 'zone', 'record_id'] },
+  }),
+  Object.freeze({
+    id: 'cloudflare.zone.delete', label: 'Delete zone', action_type: 'cloudflare.zone.delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'cloudflare', tool: 'delete_zone' },
+    why: 'Deletes an entire zone. Quorum.',
+    execution_binding: { required_fields: ['action_type', 'zone'] },
+  }),
+  Object.freeze({
+    id: 'cloudflare.firewall.disable', label: 'Disable firewall rule', action_type: 'cloudflare.firewall.disable',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'cloudflare', tool: 'set_firewall_rule' },
+    why: 'Disabling WAF/firewall opens the perimeter. Quorum + bind zone+rule.',
+    execution_binding: { required_fields: ['action_type', 'zone', 'rule_id'] },
+  }),
+]);
+
+const OPS = {
+  'dns.delete': {
+    selector: { protocol: 'cloudflare', tool: 'delete_dns_record' },
+    observed: (p) => ({ action_type: 'cloudflare.dns.delete', zone: p.zone, record_id: p.record_id }),
+    perform: (c, p) => c.deleteDnsRecord({ zone: p.zone, recordId: p.record_id }),
+  },
+  'zone.delete': {
+    selector: { protocol: 'cloudflare', tool: 'delete_zone' },
+    observed: (p) => ({ action_type: 'cloudflare.zone.delete', zone: p.zone }),
+    perform: (c, p) => c.deleteZone({ zone: p.zone }),
+  },
+  'firewall.disable': {
+    selector: { protocol: 'cloudflare', tool: 'set_firewall_rule' },
+    observed: (p) => ({ action_type: 'cloudflare.firewall.disable', zone: p.zone, rule_id: p.rule_id }),
+    perform: (c, p) => c.setFirewallRule({ zone: p.zone, ruleId: p.rule_id, enabled: false }),
+  },
+};
+
+const adapter = createAdapter({ system: 'cloudflare', ops: OPS });
+export const CLOUDFLARE_OPS = adapter.OPS;
+export function createCloudflareManifest(extra = []) { return manifestFromPack(CLOUDFLARE_ACTION_PACK, extra); }
+export function guardCloudflareMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { CLOUDFLARE_ACTION_PACK, CLOUDFLARE_OPS, createCloudflareManifest, guardCloudflareMutation };

package/adapters/jira.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Jira System-of-Record adapter.
+ * Guards bulk issue delete, project delete, and permission grants so they never
+ * reach Jira without a receipt bound to THIS resource. Client injected.
+ */
+import { createAdapter, manifestFromPack, hashCanonical } from './_kit.js';
+
+export const JIRA_ACTION_PACK = Object.freeze([
+  Object.freeze({
+    id: 'jira.issue.bulk_delete', label: 'Bulk delete issues', action_type: 'jira.issue.bulk_delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'jira', tool: 'bulk_delete_issues' },
+    why: 'Mass-destroys issues. Bind the exact JQL.',
+    execution_binding: { required_fields: ['action_type', 'project', 'jql_hash'] },
+  }),
+  Object.freeze({
+    id: 'jira.project.delete', label: 'Delete project', action_type: 'jira.project.delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'jira', tool: 'delete_project' },
+    why: 'Deletes a project and its issues. Quorum.',
+    execution_binding: { required_fields: ['action_type', 'project_key'] },
+  }),
+  Object.freeze({
+    id: 'jira.permission.grant', label: 'Grant permission', action_type: 'jira.permission.grant',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'jira', tool: 'grant_permission' },
+    why: 'Changes who can act. Quorum + bind project/principal/role.',
+    execution_binding: { required_fields: ['action_type', 'project', 'principal', 'role'] },
+  }),
+]);
+
+const OPS = {
+  'issue.bulk_delete': {
+    selector: { protocol: 'jira', tool: 'bulk_delete_issues' },
+    observed: (p) => ({ action_type: 'jira.issue.bulk_delete', project: p.project, jql_hash: hashCanonical(String(p.jql || '').trim()) }),
+    perform: (c, p) => c.bulkDeleteIssues({ project: p.project, jql: p.jql }),
+  },
+  'project.delete': {
+    selector: { protocol: 'jira', tool: 'delete_project' },
+    observed: (p) => ({ action_type: 'jira.project.delete', project_key: p.project_key }),
+    perform: (c, p) => c.deleteProject({ projectKey: p.project_key }),
+  },
+  'permission.grant': {
+    selector: { protocol: 'jira', tool: 'grant_permission' },
+    observed: (p) => ({ action_type: 'jira.permission.grant', project: p.project, principal: p.principal, role: p.role }),
+    perform: (c, p) => c.grantPermission({ project: p.project, principal: p.principal, role: p.role }),
+  },
+};
+
+const adapter = createAdapter({ system: 'jira', ops: OPS });
+export const JIRA_OPS = adapter.OPS;
+export function createJiraManifest(extra = []) { return manifestFromPack(JIRA_ACTION_PACK, extra); }
+export function guardJiraMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { JIRA_ACTION_PACK, JIRA_OPS, createJiraManifest, guardJiraMutation };

package/adapters/linear.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Linear System-of-Record adapter.
+ * Guards issue deletion, bulk delete, and team deletion so they never reach
+ * Linear without a receipt bound to THIS resource. Client injected.
+ */
+import { createAdapter, manifestFromPack, hashCanonical } from './_kit.js';
+
+export const LINEAR_ACTION_PACK = Object.freeze([
+  Object.freeze({
+    id: 'linear.issue.delete', label: 'Delete issue', action_type: 'linear.issue.delete',
+    risk: 'high', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'linear', tool: 'delete_issue' },
+    why: 'Destroys an issue. Bind the issue id.',
+    execution_binding: { required_fields: ['action_type', 'issue_id'] },
+  }),
+  Object.freeze({
+    id: 'linear.issue.bulk_delete', label: 'Bulk delete issues', action_type: 'linear.issue.bulk_delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'linear', tool: 'bulk_delete_issues' },
+    why: 'Mass-destroys issues. Bind the exact query.',
+    execution_binding: { required_fields: ['action_type', 'team', 'query_hash'] },
+  }),
+  Object.freeze({
+    id: 'linear.team.delete', label: 'Delete team', action_type: 'linear.team.delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'linear', tool: 'delete_team' },
+    why: 'Deletes a team and its issues. Quorum.',
+    execution_binding: { required_fields: ['action_type', 'team_id'] },
+  }),
+]);
+
+const OPS = {
+  'issue.delete': {
+    selector: { protocol: 'linear', tool: 'delete_issue' },
+    observed: (p) => ({ action_type: 'linear.issue.delete', issue_id: p.issue_id }),
+    perform: (c, p) => c.deleteIssue({ issueId: p.issue_id }),
+  },
+  'issue.bulk_delete': {
+    selector: { protocol: 'linear', tool: 'bulk_delete_issues' },
+    observed: (p) => ({ action_type: 'linear.issue.bulk_delete', team: p.team, query_hash: hashCanonical(String(p.query || '').trim()) }),
+    perform: (c, p) => c.bulkDeleteIssues({ team: p.team, query: p.query }),
+  },
+  'team.delete': {
+    selector: { protocol: 'linear', tool: 'delete_team' },
+    observed: (p) => ({ action_type: 'linear.team.delete', team_id: p.team_id }),
+    perform: (c, p) => c.deleteTeam({ teamId: p.team_id }),
+  },
+};
+
+const adapter = createAdapter({ system: 'linear', ops: OPS });
+export const LINEAR_OPS = adapter.OPS;
+export function createLinearManifest(extra = []) { return manifestFromPack(LINEAR_ACTION_PACK, extra); }
+export function guardLinearMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { LINEAR_ACTION_PACK, LINEAR_OPS, createLinearManifest, guardLinearMutation };

package/adapters/salesforce.js

@@ -0,0 +1,55 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Salesforce System-of-Record adapter.
+ * Guards bulk record delete, data export, and permission-set assignment so they
+ * never reach Salesforce without a receipt bound to THIS object. Client injected.
+ */
+import { createAdapter, manifestFromPack, hashCanonical } from './_kit.js';
+
+export const SALESFORCE_ACTION_PACK = Object.freeze([
+  Object.freeze({
+    id: 'salesforce.records.bulk_delete', label: 'Bulk delete records', action_type: 'salesforce.records.bulk_delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'salesforce', tool: 'bulk_delete' },
+    why: 'Mass-destroys CRM records. Bind object + the exact SOQL.',
+    execution_binding: { required_fields: ['action_type', 'object', 'soql_hash'] },
+  }),
+  Object.freeze({
+    id: 'salesforce.data.export', label: 'Bulk data export', action_type: 'salesforce.data.export',
+    risk: 'high', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'salesforce', tool: 'export' },
+    why: 'Exfiltrates CRM data. Bind object + recipient.',
+    execution_binding: { required_fields: ['action_type', 'object', 'recipient'] },
+  }),
+  Object.freeze({
+    id: 'salesforce.permission_set.assign', label: 'Assign permission set', action_type: 'salesforce.permission_set.assign',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'salesforce', tool: 'assign_permission_set' },
+    why: 'Grants privileges. Quorum + bind user + permission set.',
+    execution_binding: { required_fields: ['action_type', 'user', 'permission_set'] },
+  }),
+]);
+
+const OPS = {
+  'records.bulk_delete': {
+    selector: { protocol: 'salesforce', tool: 'bulk_delete' },
+    observed: (p) => ({ action_type: 'salesforce.records.bulk_delete', object: p.object, soql_hash: hashCanonical(String(p.soql || '').trim()) }),
+    perform: (c, p) => c.bulkDelete({ object: p.object, soql: p.soql }),
+  },
+  'data.export': {
+    selector: { protocol: 'salesforce', tool: 'export' },
+    observed: (p) => ({ action_type: 'salesforce.data.export', object: p.object, recipient: p.recipient }),
+    perform: (c, p) => c.export({ object: p.object, recipient: p.recipient }),
+  },
+  'permission_set.assign': {
+    selector: { protocol: 'salesforce', tool: 'assign_permission_set' },
+    observed: (p) => ({ action_type: 'salesforce.permission_set.assign', user: p.user, permission_set: p.permission_set }),
+    perform: (c, p) => c.assignPermissionSet({ user: p.user, permissionSet: p.permission_set }),
+  },
+};
+
+const adapter = createAdapter({ system: 'salesforce', ops: OPS });
+export const SALESFORCE_OPS = adapter.OPS;
+export function createSalesforceManifest(extra = []) { return manifestFromPack(SALESFORCE_ACTION_PACK, extra); }
+export function guardSalesforceMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { SALESFORCE_ACTION_PACK, SALESFORCE_OPS, createSalesforceManifest, guardSalesforceMutation };

package/adapters/vercel.js

@@ -0,0 +1,56 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EMILIA Gate — Vercel System-of-Record adapter.
+ * Guards promote-to-production, project delete, and env/secret changes so they
+ * never reach Vercel without a receipt bound to THIS project. Client injected
+ * (the Vercel REST client or a thin wrapper).
+ */
+import { createAdapter, manifestFromPack } from './_kit.js';
+
+export const VERCEL_ACTION_PACK = Object.freeze([
+  Object.freeze({
+    id: 'vercel.deploy.promote', label: 'Promote to production', action_type: 'vercel.deploy.promote',
+    risk: 'critical', receipt_required: true, assurance_class: 'quorum',
+    match: { protocol: 'vercel', tool: 'promote_deployment' },
+    why: 'Changes live production. Quorum for the prod cutover.',
+    execution_binding: { required_fields: ['action_type', 'project', 'deployment_id'] },
+  }),
+  Object.freeze({
+    id: 'vercel.project.delete', label: 'Delete project', action_type: 'vercel.project.delete',
+    risk: 'critical', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'vercel', tool: 'delete_project' },
+    why: 'Destroys a project and its deployments. Bind the project.',
+    execution_binding: { required_fields: ['action_type', 'project'] },
+  }),
+  Object.freeze({
+    id: 'vercel.env.set', label: 'Set env / secret', action_type: 'vercel.env.set',
+    risk: 'high', receipt_required: true, assurance_class: 'class_a',
+    match: { protocol: 'vercel', tool: 'upsert_env' },
+    why: 'Changes production secrets/config. Bind project+key+target.',
+    execution_binding: { required_fields: ['action_type', 'project', 'key', 'target'] },
+  }),
+]);
+
+const OPS = {
+  'deploy.promote': {
+    selector: { protocol: 'vercel', tool: 'promote_deployment' },
+    observed: (p) => ({ action_type: 'vercel.deploy.promote', project: p.project, deployment_id: p.deployment_id }),
+    perform: (c, p) => c.promoteDeployment({ project: p.project, deploymentId: p.deployment_id }),
+  },
+  'project.delete': {
+    selector: { protocol: 'vercel', tool: 'delete_project' },
+    observed: (p) => ({ action_type: 'vercel.project.delete', project: p.project }),
+    perform: (c, p) => c.deleteProject({ project: p.project }),
+  },
+  'env.set': {
+    selector: { protocol: 'vercel', tool: 'upsert_env' },
+    observed: (p) => ({ action_type: 'vercel.env.set', project: p.project, key: p.key, target: p.target }),
+    perform: (c, p) => c.upsertEnv({ project: p.project, key: p.key, value: p.value, target: p.target }),
+  },
+};
+
+const adapter = createAdapter({ system: 'vercel', ops: OPS });
+export const VERCEL_OPS = adapter.OPS;
+export function createVercelManifest(extra = []) { return manifestFromPack(VERCEL_ACTION_PACK, extra); }
+export function guardVercelMutation(gate, client, args) { return adapter.guard(gate, client, args); }
+export default { VERCEL_ACTION_PACK, VERCEL_OPS, createVercelManifest, guardVercelMutation };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilia-protocol/gate",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "EMILIA Gate — the Trusted Action Firewall. Deny-by-default enforcement for consequential machine actions: an action runs only with a valid, in-scope, sufficiently-assured, non-replayed EMILIA authorization receipt (proof a named human authorized this exact action). Composes require-receipt + verify; adds assurance-tier enforcement, one-time consumption (replay defense), a tamper-evident evidence log, default high-risk action packs, execution-field binding, reliance packets, an MCP drop-in, a GitHub system-of-record adapter, and EG-1 conformance. Framework-agnostic, fails closed. Reference implementation, experimental.",
   "license": "Apache-2.0",
   "type": "module",
@@ -15,11 +15,16 @@
     "./adapters/k8s": "./adapters/k8s.js",
     "./adapters/terraform": "./adapters/terraform.js",
     "./adapters/gcp": "./adapters/gcp.js",
+    "./adapters/vercel": "./adapters/vercel.js",
+    "./adapters/cloudflare": "./adapters/cloudflare.js",
+    "./adapters/linear": "./adapters/linear.js",
+    "./adapters/jira": "./adapters/jira.js",
+    "./adapters/salesforce": "./adapters/salesforce.js",
     "./key-registry": "./key-registry.js",
     "./retention": "./retention.js",
     "./package.json": "./package.json"
   },
-  "files": ["index.js", "store.js", "evidence.js", "action-packs.js", "execution-binding.js", "reliance-packet.js", "key-registry.js", "retention.js", "eg1-conformance.js", "eg1.mjs", "mcp.js", "adapters/_kit.js", "adapters/github.js", "adapters/github-demo.mjs", "adapters/stripe.js", "adapters/supabase.js", "adapters/aws.js", "adapters/k8s.js", "adapters/terraform.js", "adapters/gcp.js", "demo.mjs", "custody-demo.mjs", "README.md"],
+  "files": ["index.js", "store.js", "evidence.js", "action-packs.js", "execution-binding.js", "reliance-packet.js", "key-registry.js", "retention.js", "eg1-conformance.js", "eg1.mjs", "mcp.js", "adapters/_kit.js", "adapters/github.js", "adapters/github-demo.mjs", "adapters/stripe.js", "adapters/supabase.js", "adapters/aws.js", "adapters/k8s.js", "adapters/terraform.js", "adapters/gcp.js", "adapters/vercel.js", "adapters/cloudflare.js", "adapters/linear.js", "adapters/jira.js", "adapters/salesforce.js", "demo.mjs", "custody-demo.mjs", "README.md"],
   "scripts": {
     "test": "node --test",
     "demo": "node demo.mjs",