@fides-anima/fpp-protocol-core 1.0.2

package/dist/freshness.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Freshness and replay-key contracts for signed envelopes.
+ *
+ * Policy limits (max lifetime, clock skew) are verifier-controlled inputs.
+ * This module does not implement replay-cache persistence (Plan 4).
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const FreshnessEnvelopeSchema: import("@sinclair/typebox").TObject<{
+    audience: import("@sinclair/typebox").TString;
+    challenge: import("@sinclair/typebox").TString;
+    issuedAt: import("@sinclair/typebox").TString;
+    expiresAt: import("@sinclair/typebox").TString;
+}>;
+export type FreshnessEnvelope = Static<typeof FreshnessEnvelopeSchema>;
+export type FreshnessPolicy = {
+    /** Maximum allowed (expiresAt - issuedAt) in milliseconds. */
+    maxLifetimeMs: number;
+    /** Allowed clock skew when comparing issuedAt/expiresAt to now. */
+    allowedClockSkewMs: number;
+    /** Verifier clock — not signer-controlled. */
+    nowMs: number;
+};
+export type FreshnessValidation = {
+    valid: boolean;
+    reason: string;
+};
+export type FreshnessParseResult = {
+    ok: true;
+    envelope: FreshnessEnvelope;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function parseFreshnessEnvelope(input: unknown): FreshnessParseResult;
+export declare function validateFreshness(envelope: FreshnessEnvelope, policy: FreshnessPolicy): FreshnessValidation;
+/**
+ * Deterministic replay key over audience + challenge + issuedAt.
+ * Persistence/dedup is deferred to Plan 4.
+ */
+export declare function buildReplayKey(envelope: FreshnessEnvelope): string;
+//# sourceMappingURL=freshness.d.ts.map

package/dist/freshness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freshness.d.ts","sourceRoot":"","sources":["../src/freshness.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAMtD,eAAO,MAAM,uBAAuB;;;;;EAQnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,MAAM,MAAM,eAAe,GAAG;IAC5B,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAY3E;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,eAAe,GACtB,mBAAmB,CAuBrB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAalE"}

package/dist/freshness.js

@@ -0,0 +1,66 @@
+/**
+ * Freshness and replay-key contracts for signed envelopes.
+ *
+ * Policy limits (max lifetime, clock skew) are verifier-controlled inputs.
+ * This module does not implement replay-cache persistence (Plan 4).
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { sha256 } from "@noble/hashes/sha256";
+import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils";
+import { canonicalizeV2 } from "./canonical-json.js";
+export const FreshnessEnvelopeSchema = Type.Object({
+    audience: Type.String({ minLength: 1 }),
+    challenge: Type.String({ minLength: 1 }),
+    issuedAt: Type.String({ minLength: 1 }),
+    expiresAt: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export function parseFreshnessEnvelope(input) {
+    if (!Value.Check(FreshnessEnvelopeSchema, input)) {
+        const errors = [...Value.Errors(FreshnessEnvelopeSchema, input)];
+        return {
+            ok: false,
+            error: errors[0] !== undefined
+                ? `${errors[0].path}: ${errors[0].message}`
+                : "invalid freshness envelope",
+        };
+    }
+    return { ok: true, envelope: input };
+}
+export function validateFreshness(envelope, policy) {
+    const issued = Date.parse(envelope.issuedAt);
+    const expires = Date.parse(envelope.expiresAt);
+    if (Number.isNaN(issued) || Number.isNaN(expires)) {
+        return { valid: false, reason: "issuedAt/expiresAt must be ISO-8601" };
+    }
+    if (expires <= issued) {
+        return { valid: false, reason: "expiresAt must be after issuedAt" };
+    }
+    const lifetime = expires - issued;
+    if (lifetime > policy.maxLifetimeMs) {
+        return {
+            valid: false,
+            reason: "lifetime exceeds verifier policy maxLifetimeMs",
+        };
+    }
+    if (issued > policy.nowMs + policy.allowedClockSkewMs) {
+        return { valid: false, reason: "issuedAt is in the future beyond skew" };
+    }
+    if (expires < policy.nowMs - policy.allowedClockSkewMs) {
+        return { valid: false, reason: "envelope expired" };
+    }
+    return { valid: true, reason: "fresh" };
+}
+/**
+ * Deterministic replay key over audience + challenge + issuedAt.
+ * Persistence/dedup is deferred to Plan 4.
+ */
+export function buildReplayKey(envelope) {
+    return bytesToHex(sha256(utf8ToBytes("fpp:v2:replay\0" +
+        canonicalizeV2({
+            audience: envelope.audience,
+            challenge: envelope.challenge,
+            issuedAt: envelope.issuedAt,
+        }))));
+}
+//# sourceMappingURL=freshness.js.map

package/dist/freshness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"freshness.js","sourceRoot":"","sources":["../src/freshness.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAChD;IACE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAsBF,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;gBACrB,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;gBAC3C,CAAC,CAAC,4BAA4B;SACnC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAA2B,EAC3B,MAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC,IAAI,QAAQ,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,gDAAgD;SACzD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAA2B;IACxD,OAAO,UAAU,CACf,MAAM,CACJ,WAAW,CACT,iBAAiB;QACf,cAAc,CAAC;YACb,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CACL,CACF,CACF,CAAC;AACJ,CAAC"}

package/dist/governance.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Gateway governance transition contracts: modes, epochs, and audited events.
+ *
+ * These schemas define the voluntary constitutional-layer state machine
+ * (enabled → draining → disabled) without implying gateway enforcement is shipped.
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const GOVERNANCE_MODES: readonly ["enabled", "draining", "disabled"];
+export type GovernanceMode = (typeof GOVERNANCE_MODES)[number];
+export declare const GOVERNANCE_EVENT_KINDS: readonly ["governance-enabled", "governance-disabled"];
+export type GovernanceEventKind = (typeof GOVERNANCE_EVENT_KINDS)[number];
+export declare const GovernanceEpochSchema: import("@sinclair/typebox").TInteger;
+export declare const GovernanceModeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">, ...import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">[]]>;
+export declare const GovernanceStateV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">, ...import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">[]]>;
+    epoch: import("@sinclair/typebox").TInteger;
+}>;
+export type GovernanceStateV1 = Static<typeof GovernanceStateV1Schema>;
+export declare const GovernanceActorSchema: import("@sinclair/typebox").TObject<{
+    role: import("@sinclair/typebox").TString;
+    id: import("@sinclair/typebox").TString;
+}>;
+export declare const GovernanceEventSignatureSchema: import("@sinclair/typebox").TObject<{
+    alg: import("@sinclair/typebox").TString;
+    keyId: import("@sinclair/typebox").TString;
+    sig: import("@sinclair/typebox").TString;
+}>;
+/**
+ * Tamper-evident governance enable/disable event.
+ * `epoch` is the published epoch after the transition; `previousMode` is the
+ * mode immediately before durable publication of this event.
+ */
+export declare const GovernanceEventV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    kind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"governance-enabled">, import("@sinclair/typebox").TLiteral<"governance-disabled">]>;
+    eventId: import("@sinclair/typebox").TString;
+    ts: import("@sinclair/typebox").TString;
+    epoch: import("@sinclair/typebox").TInteger;
+    previousMode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">, ...import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">[]]>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">, ...import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">[]]>;
+    actor: import("@sinclair/typebox").TObject<{
+        role: import("@sinclair/typebox").TString;
+        id: import("@sinclair/typebox").TString;
+    }>;
+    constitutionHash: import("@sinclair/typebox").TString;
+    policyEngineVersion: import("@sinclair/typebox").TString;
+    prevHash: import("@sinclair/typebox").TString;
+    entryHash: import("@sinclair/typebox").TString;
+    reason: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    signature: import("@sinclair/typebox").TObject<{
+        alg: import("@sinclair/typebox").TString;
+        keyId: import("@sinclair/typebox").TString;
+        sig: import("@sinclair/typebox").TString;
+    }>;
+}>;
+export type GovernanceEventV1 = Static<typeof GovernanceEventV1Schema>;
+export type GovernanceEpochParseResult = {
+    ok: true;
+    epoch: number;
+} | {
+    ok: false;
+    error: string;
+};
+export type GovernanceStateParseResult = {
+    ok: true;
+    state: GovernanceStateV1;
+} | {
+    ok: false;
+    error: string;
+};
+export type GovernanceEventParseResult = {
+    ok: true;
+    event: GovernanceEventV1;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function isGovernanceMode(value: unknown): value is GovernanceMode;
+export declare function parseGovernanceEpoch(input: unknown): GovernanceEpochParseResult;
+export declare function parseGovernanceState(input: unknown): GovernanceStateParseResult;
+/**
+ * Parse a governance event and enforce kind ↔ terminal mode consistency:
+ * disabled events publish mode "disabled"; enabled events publish "enabled".
+ */
+export declare function parseGovernanceEvent(input: unknown): GovernanceEventParseResult;
+//# sourceMappingURL=governance.d.ts.map

package/dist/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGtD,eAAO,MAAM,gBAAgB,8CAA+C,CAAC;AAE7E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,sBAAsB,wDAGzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAK1E,eAAO,MAAM,qBAAqB,sCAA+B,CAAC;AAElE,eAAO,MAAM,oBAAoB,iMAKhC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;EAOnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,eAAO,MAAM,qBAAqB;;;EAMjC,CAAC;AAEF,eAAO,MAAM,8BAA8B;;;;EAO1C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;EAqBnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,0BAA0B,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAKxE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,0BAA0B,CAK5B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,0BAA0B,CAK5B;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,0BAA0B,CAiB5B"}

package/dist/governance.js

@@ -0,0 +1,94 @@
+/**
+ * Gateway governance transition contracts: modes, epochs, and audited events.
+ *
+ * These schemas define the voluntary constitutional-layer state machine
+ * (enabled → draining → disabled) without implying gateway enforcement is shipped.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+export const GOVERNANCE_MODES = ["enabled", "draining", "disabled"];
+export const GOVERNANCE_EVENT_KINDS = [
+    "governance-enabled",
+    "governance-disabled",
+];
+/** SHA-256 hex digest (64 lowercase or uppercase hex chars). */
+const HexDigest64 = Type.String({ pattern: "^[0-9a-fA-F]{64}$" });
+export const GovernanceEpochSchema = Type.Integer({ minimum: 0 });
+export const GovernanceModeSchema = Type.Union(GOVERNANCE_MODES.map((m) => Type.Literal(m)));
+export const GovernanceStateV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    mode: GovernanceModeSchema,
+    epoch: GovernanceEpochSchema,
+}, { additionalProperties: false });
+export const GovernanceActorSchema = Type.Object({
+    role: Type.String({ minLength: 1 }),
+    id: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export const GovernanceEventSignatureSchema = Type.Object({
+    alg: Type.String({ minLength: 1 }),
+    keyId: Type.String({ minLength: 1 }),
+    sig: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+/**
+ * Tamper-evident governance enable/disable event.
+ * `epoch` is the published epoch after the transition; `previousMode` is the
+ * mode immediately before durable publication of this event.
+ */
+export const GovernanceEventV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    kind: Type.Union([
+        Type.Literal("governance-enabled"),
+        Type.Literal("governance-disabled"),
+    ]),
+    eventId: Type.String({ minLength: 1 }),
+    ts: Type.String({ minLength: 1 }),
+    epoch: GovernanceEpochSchema,
+    previousMode: GovernanceModeSchema,
+    mode: GovernanceModeSchema,
+    actor: GovernanceActorSchema,
+    constitutionHash: HexDigest64,
+    policyEngineVersion: Type.String({ minLength: 1 }),
+    prevHash: HexDigest64,
+    entryHash: HexDigest64,
+    reason: Type.Optional(Type.String({ minLength: 1 })),
+    signature: GovernanceEventSignatureSchema,
+}, { additionalProperties: false });
+export function isGovernanceMode(value) {
+    return (typeof value === "string" &&
+        GOVERNANCE_MODES.includes(value));
+}
+export function parseGovernanceEpoch(input) {
+    if (!Value.Check(GovernanceEpochSchema, input)) {
+        return { ok: false, error: "invalid GovernanceEpoch" };
+    }
+    return { ok: true, epoch: input };
+}
+export function parseGovernanceState(input) {
+    if (!Value.Check(GovernanceStateV1Schema, input)) {
+        return { ok: false, error: "invalid GovernanceStateV1" };
+    }
+    return { ok: true, state: input };
+}
+/**
+ * Parse a governance event and enforce kind ↔ terminal mode consistency:
+ * disabled events publish mode "disabled"; enabled events publish "enabled".
+ */
+export function parseGovernanceEvent(input) {
+    if (!Value.Check(GovernanceEventV1Schema, input)) {
+        return { ok: false, error: "invalid GovernanceEventV1" };
+    }
+    if (input.kind === "governance-disabled" && input.mode !== "disabled") {
+        return {
+            ok: false,
+            error: "governance-disabled event must publish mode disabled",
+        };
+    }
+    if (input.kind === "governance-enabled" && input.mode !== "enabled") {
+        return {
+            ok: false,
+            error: "governance-enabled event must publish mode enabled",
+        };
+    }
+    return { ok: true, event: input };
+}
+//# sourceMappingURL=governance.js.map

package/dist/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAI7E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,oBAAoB;IACpB,qBAAqB;CACb,CAAC;AAIX,gEAAgE;AAChE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAC5C,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAG1C,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAChD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,qBAAqB;CAC7B,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAC9C;IACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CAClC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC,MAAM,CACvD;IACE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACnC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAChD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACpC,CAAC;IACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjC,KAAK,EAAE,qBAAqB;IAC5B,YAAY,EAAE,oBAAoB;IAClC,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,qBAAqB;IAC5B,gBAAgB,EAAE,WAAW;IAC7B,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAClD,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACpD,SAAS,EAAE,8BAA8B;CAC1C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAgBF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,gBAAsC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,sDAAsD;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oDAAoD;SAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/dist/identity.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Key-bound agent identity primitives.
+ *
+ * V2 agent IDs are full key fingerprints: `fpp:ed25519:<sha256(pubkey)>`.
+ * Legacy truncated aliases (`fpp-<16 hex>`) remain parseable for display and
+ * migration but are never independent proof of identity.
+ */
+export declare const KEY_ALGORITHM: "ed25519";
+export type ParsedAgentId = {
+    kind: "v2";
+    algorithm: typeof KEY_ALGORITHM;
+    fingerprint: string;
+    raw: string;
+} | {
+    kind: "legacy-alias";
+    fingerprintPrefix: string;
+    raw: string;
+} | {
+    kind: "unknown";
+    raw: string;
+};
+/** SHA-256 fingerprint of the raw public key bytes (64 hex chars). */
+export declare function fingerprintPublicKey(publicKeyHex: string): string;
+/** V2 agent identifier bound to the full public-key fingerprint. */
+export declare function deriveAgentIdV2(publicKeyHex: string): string;
+/**
+ * Historical truncated alias: `fpp-` + first 16 hex chars of SHA-256(pubkey).
+ * Labeled for migration/display only — not independent identity proof.
+ */
+export declare function deriveLegacyAlias(publicKeyHex: string): string;
+export declare function isLegacyAgentAlias(agentId: string): boolean;
+export declare function parseAgentId(agentId: string): ParsedAgentId;
+/**
+ * Recompute the expected identifier from the public key and compare.
+ * Legacy aliases match only when `allowLegacyAlias` is explicitly set.
+ */
+export declare function publicKeyMatchesAgentId(agentId: string, publicKeyHex: string, options?: {
+    allowLegacyAlias?: boolean;
+}): boolean;
+export declare function verifySignature(message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
+export declare function signMessage(message: Uint8Array, privateKey: Uint8Array): Uint8Array;
+export declare function publicKeyFromSeed(seed: Uint8Array): Uint8Array;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAC;AAEhD,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAgBrC,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAmB3D;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,OAAO,CAOT;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAMT;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,GACrB,UAAU,CAEZ;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAE9D"}

package/dist/identity.js

@@ -0,0 +1,93 @@
+/**
+ * Key-bound agent identity primitives.
+ *
+ * V2 agent IDs are full key fingerprints: `fpp:ed25519:<sha256(pubkey)>`.
+ * Legacy truncated aliases (`fpp-<16 hex>`) remain parseable for display and
+ * migration but are never independent proof of identity.
+ */
+import { sha256 } from "@noble/hashes/sha256";
+import { bytesToHex } from "@noble/hashes/utils";
+import * as ed from "@noble/ed25519";
+import { sha512 } from "@noble/hashes/sha512";
+ed.etc.sha512Sync = (...m) => sha512(ed.etc.concatBytes(...m));
+export const KEY_ALGORITHM = "ed25519";
+function decodePublicKeyHex(publicKeyHex) {
+    if (!/^[0-9a-fA-F]+$/.test(publicKeyHex)) {
+        throw new Error("public key must be hex");
+    }
+    if (publicKeyHex.length !== 64) {
+        throw new Error("public key must be 32 bytes (64 hex chars)");
+    }
+    const bytes = new Uint8Array(32);
+    for (let i = 0; i < 32; i++) {
+        bytes[i] = Number.parseInt(publicKeyHex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+/** SHA-256 fingerprint of the raw public key bytes (64 hex chars). */
+export function fingerprintPublicKey(publicKeyHex) {
+    const bytes = decodePublicKeyHex(publicKeyHex);
+    return bytesToHex(sha256(bytes));
+}
+/** V2 agent identifier bound to the full public-key fingerprint. */
+export function deriveAgentIdV2(publicKeyHex) {
+    return `fpp:${KEY_ALGORITHM}:${fingerprintPublicKey(publicKeyHex)}`;
+}
+/**
+ * Historical truncated alias: `fpp-` + first 16 hex chars of SHA-256(pubkey).
+ * Labeled for migration/display only — not independent identity proof.
+ */
+export function deriveLegacyAlias(publicKeyHex) {
+    return "fpp-" + fingerprintPublicKey(publicKeyHex).slice(0, 16);
+}
+export function isLegacyAgentAlias(agentId) {
+    return /^fpp-[0-9a-f]{16}$/i.test(agentId);
+}
+export function parseAgentId(agentId) {
+    const v2 = /^fpp:(ed25519):([0-9a-f]{64})$/i.exec(agentId);
+    if (v2) {
+        return {
+            kind: "v2",
+            algorithm: KEY_ALGORITHM,
+            fingerprint: v2[2].toLowerCase(),
+            raw: agentId,
+        };
+    }
+    const legacy = /^fpp-([0-9a-f]{16})$/i.exec(agentId);
+    if (legacy) {
+        return {
+            kind: "legacy-alias",
+            fingerprintPrefix: legacy[1].toLowerCase(),
+            raw: agentId,
+        };
+    }
+    return { kind: "unknown", raw: agentId };
+}
+/**
+ * Recompute the expected identifier from the public key and compare.
+ * Legacy aliases match only when `allowLegacyAlias` is explicitly set.
+ */
+export function publicKeyMatchesAgentId(agentId, publicKeyHex, options = {}) {
+    const expectedV2 = deriveAgentIdV2(publicKeyHex);
+    if (agentId === expectedV2)
+        return true;
+    if (options.allowLegacyAlias === true) {
+        return agentId === deriveLegacyAlias(publicKeyHex);
+    }
+    return false;
+}
+export function verifySignature(message, signature, publicKey) {
+    try {
+        return ed.verify(signature, message, publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+export function signMessage(message, privateKey) {
+    return ed.sign(message, privateKey);
+}
+export function publicKeyFromSeed(seed) {
+    return ed.getPublicKey(seed);
+}
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAC;AAOhD,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,OAAO,OAAO,aAAa,IAAI,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,OAAO,MAAM,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,EAAE,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,EAAE,EAAE,CAAC;QACP,OAAO;YACL,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,aAAa;YACxB,WAAW,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;YACjC,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;YAC3C,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,YAAoB,EACpB,UAA0C,EAAE;IAE5C,MAAM,UAAU,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,OAAO,KAAK,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,OAAmB,EACnB,SAAqB,EACrB,SAAqB;IAErB,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAmB,EACnB,UAAsB;IAEtB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @fides-anima/fpp-protocol-core — shared schemas and cryptographic contracts
+ * for the Freedom Preserving Protocol.
+ *
+ * Package version and protocol schema version are independent:
+ * this package release carries schema version 2.
+ */
+export declare const PACKAGE_NAME: "@fides-anima/fpp-protocol-core";
+export declare const PACKAGE_VERSION: "1.0.2";
+/** Protocol schema version carried by this package release. */
+export declare const SCHEMA_VERSION: 2;
+export { canonicalize, canonicalizeV1, canonicalizeV2, } from "./canonical-json.js";
+export { DIGEST_DOMAINS, digest, hashEntryV1, type DigestDomain, type DigestInput, } from "./digest.js";
+export { computeMerkleRoot, computeMerkleRootV1, computeMerkleRootV2, createMerkleProof, createMerkleProofV1, createMerkleProofV2, hashPairV1, hashPairV2, verifyMerkleProof, verifyMerkleProofV1, verifyMerkleProofV2, type MerkleProof, type MerkleProofStep, } from "./merkle.js";
+export { KEY_ALGORITHM, deriveAgentIdV2, deriveLegacyAlias, fingerprintPublicKey, isLegacyAgentAlias, parseAgentId, publicKeyFromSeed, publicKeyMatchesAgentId, signMessage, verifySignature, type ParsedAgentId, } from "./identity.js";
+export { STEWARD_DIGEST_DOMAINS, KeyRefSchema, OperatorAuthorizationRevocationV1Schema, OperatorAuthorizationV1Schema, StewardBootstrapPolicyCapsV1Schema, StewardBootstrapV1Schema, StewardKeyAttestationV1Schema, attestationSigningFields, authorizationRevocationSigningFields, authorizationSigningFields, bootstrapSigningFields, buildStewardEvidenceDigest, buildStewardReplayDigest, containsOpenPgpSecretKeyArmor, isStewardIdV1, mintStewardIdV1, parseKeyRef, parseOperatorAuthorization, parseOperatorAuthorizationRevocation, parseStewardBootstrap, parseStewardIdV1, parseStewardKeyAttestation, validateOperatorAuthorizationBounds, type BoundsResult, type KeyRefParseResult, type OperatorAuthorizationParseResult, type OperatorAuthorizationRevocationParseResult, type OperatorAuthorizationRevocationV1, type OperatorAuthorizationV1, type ParsedKeyRef, type ParsedStewardIdV1, type StewardBootstrapParseResult, type StewardBootstrapPolicyCapsV1, type StewardBootstrapV1, type StewardIdParseResult, type StewardIdV1, type StewardKeyAttestationParseResult, type StewardKeyAttestationV1, } from "./steward-authorization.js";
+export { CLAIM_CLASSES, ConstitutionalClaimV2Schema, LegacyConstitutionalClaimV1Schema, parseClaim, type ClaimClass, type ClaimParseResult, type ConstitutionalClaimV2, type LegacyConstitutionalClaimV1, } from "./claims.js";
+export { FreshnessEnvelopeSchema, buildReplayKey, parseFreshnessEnvelope, validateFreshness, type FreshnessEnvelope, type FreshnessParseResult, type FreshnessPolicy, type FreshnessValidation, } from "./freshness.js";
+export { ConformanceReceiptV1Schema, ReceiptInclusionEvidenceV1Schema, parseConformanceReceipt, parseReceiptInclusionEvidence, type ConformanceReceiptV1, type ReceiptInclusionEvidenceParseResult, type ReceiptInclusionEvidenceV1, type ReceiptParseResult, } from "./receipts.js";
+export { GOVERNANCE_EVENT_KINDS, GOVERNANCE_MODES, GovernanceActorSchema, GovernanceEpochSchema, GovernanceEventSignatureSchema, GovernanceEventV1Schema, GovernanceModeSchema, GovernanceStateV1Schema, isGovernanceMode, parseGovernanceEpoch, parseGovernanceEvent, parseGovernanceState, type GovernanceEpochParseResult, type GovernanceEventKind, type GovernanceEventParseResult, type GovernanceEventV1, type GovernanceMode, type GovernanceStateParseResult, type GovernanceStateV1, } from "./governance.js";
+export { MANDATE_ISSUER_CLASSES, StandingMandateV1Schema, mandateSigningFields, parseStandingMandate, validateMandateValidity, verifyMandateSignature, type MandateIssuerClass, type MandateLedgerEntry, type MandateParseResult, type MandateStoreFile, type MandateValidity, type MandateValidityPolicy, type StandingMandateV1, } from "./mandates.js";
+export { SignedEmergencyOverrideV1Schema, emergencyOverrideSigningFields, parseSignedEmergencyOverride, validateEmergencyOverrideValidity, verifyEmergencyOverrideSignature, type EmergencyOverrideLedgerEntry, type EmergencyOverrideParseResult, type EmergencyOverrideStoreFile, type EmergencyOverrideValidity, type EmergencyOverrideValidityPolicy, type SignedEmergencyOverrideV1, } from "./emergency-override.js";
+export { AUTHORIZATION_CLASSES, AUTHZ, DISPOSITION_DECISIONS, isAuthorizationClass, isDispositionDecision, parseDispositionDecision, type AuthorizationClass, type DispositionDecision, type DispositionParseResult, } from "./disposition.js";
+export { CapsuleAdoptionDisclosureSummarySchema, TrustStateCapsuleV2Schema, parseTrustStateCapsule, validateCapsuleAdoptionConsistency, type CapsuleAdoptionConsistency, type CapsuleAdoptionDisclosureSummary, type CapsuleParseResult, type TrustStateCapsuleV2, } from "./capsules.js";
+export { ADOPTION_OVERLAY_FLAGS, ADOPTION_STATES, AdoptionStateRecordV1Schema, AdoptionStateRecordV2Schema, ENFORCEMENT_GRADES, parseAdoptionStateRecord, type AdoptionOverlayFlag, type AdoptionParseResult, type AdoptionState, type AdoptionStateRecord, type AdoptionStateRecordV1, type AdoptionStateRecordV2, type EnforcementGrade, } from "./adoption.js";
+export { ADOPTION_ASSURANCE_CLASSES, AdoptionDisclosureV1Schema, maxJustifiedConclusion, parseAdoptionDisclosure, type AdoptionAssurance, type AdoptionDisclosureParseResult, type AdoptionDisclosureV1, } from "./adoption-disclosure.js";
+export { EvidenceEnvelopeV1Schema, parseEvidenceEnvelope, type EvidenceEnvelopeV1, type EvidenceParseResult, } from "./evidence.js";
+export { QUORUM_CLASSES, QUORUM_VOTES, QuorumBallotV1Schema, QuorumEvidencePackageV1Schema, QuorumProposalV1Schema, computeQuorumEvidenceDigest, parseQuorumBallot, parseQuorumEvidencePackage, parseQuorumProposal, validateBallotAgainstProposal, type BallotMatchResult, type QuorumBallotParseResult, type QuorumBallotV1, type QuorumClass, type QuorumEvidencePackageV1, type QuorumEvidenceParseResult, type QuorumProposalParseResult, type QuorumProposalV1, type QuorumVote, } from "./quorum.js";
+export { DEFAULT_WORKSPACE_PROFILE, resolveWorkspaceRoot, workspaceFile, absolutizeWorkspacePath, type ResolveWorkspaceOptions, type AbsolutizeWorkspaceOptions, type WorkspaceProfileId, } from "./workspace-profile.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,YAAY,EAAG,gCAAyC,CAAC;AACtE,eAAO,MAAM,eAAe,EAAG,OAAgB,CAAC;AAChD,+DAA+D;AAC/D,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,cAAc,EACd,MAAM,EACN,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,WAAW,EACX,eAAe,EACf,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,uCAAuC,EACvC,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,aAAa,EACb,eAAe,EACf,WAAW,EACX,0BAA0B,EAC1B,oCAAoC,EACpC,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,mCAAmC,EACnC,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,gCAAgC,EACrC,KAAK,0CAA0C,EAC/C,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC5B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,gCAAgC,EACrC,KAAK,uBAAuB,GAC7B,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,aAAa,EACb,2BAA2B,EAC3B,iCAAiC,EACjC,UAAU,EACV,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,oBAAoB,EACzB,KAAK,mCAAmC,EACxC,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,EAChC,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,GAC/B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,KAAK,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,sCAAsC,EACtC,yBAAyB,EACzB,sBAAsB,EACtB,kCAAkC,EAClC,KAAK,0BAA0B,EAC/B,KAAK,gCAAgC,EACrC,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,oBAAoB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/**
+ * @fides-anima/fpp-protocol-core — shared schemas and cryptographic contracts
+ * for the Freedom Preserving Protocol.
+ *
+ * Package version and protocol schema version are independent:
+ * this package release carries schema version 2.
+ */
+export const PACKAGE_NAME = "@fides-anima/fpp-protocol-core";
+export const PACKAGE_VERSION = "1.0.2";
+/** Protocol schema version carried by this package release. */
+export const SCHEMA_VERSION = 2;
+export { canonicalize, canonicalizeV1, canonicalizeV2, } from "./canonical-json.js";
+export { DIGEST_DOMAINS, digest, hashEntryV1, } from "./digest.js";
+export { computeMerkleRoot, computeMerkleRootV1, computeMerkleRootV2, createMerkleProof, createMerkleProofV1, createMerkleProofV2, hashPairV1, hashPairV2, verifyMerkleProof, verifyMerkleProofV1, verifyMerkleProofV2, } from "./merkle.js";
+export { KEY_ALGORITHM, deriveAgentIdV2, deriveLegacyAlias, fingerprintPublicKey, isLegacyAgentAlias, parseAgentId, publicKeyFromSeed, publicKeyMatchesAgentId, signMessage, verifySignature, } from "./identity.js";
+export { STEWARD_DIGEST_DOMAINS, KeyRefSchema, OperatorAuthorizationRevocationV1Schema, OperatorAuthorizationV1Schema, StewardBootstrapPolicyCapsV1Schema, StewardBootstrapV1Schema, StewardKeyAttestationV1Schema, attestationSigningFields, authorizationRevocationSigningFields, authorizationSigningFields, bootstrapSigningFields, buildStewardEvidenceDigest, buildStewardReplayDigest, containsOpenPgpSecretKeyArmor, isStewardIdV1, mintStewardIdV1, parseKeyRef, parseOperatorAuthorization, parseOperatorAuthorizationRevocation, parseStewardBootstrap, parseStewardIdV1, parseStewardKeyAttestation, validateOperatorAuthorizationBounds, } from "./steward-authorization.js";
+export { CLAIM_CLASSES, ConstitutionalClaimV2Schema, LegacyConstitutionalClaimV1Schema, parseClaim, } from "./claims.js";
+export { FreshnessEnvelopeSchema, buildReplayKey, parseFreshnessEnvelope, validateFreshness, } from "./freshness.js";
+export { ConformanceReceiptV1Schema, ReceiptInclusionEvidenceV1Schema, parseConformanceReceipt, parseReceiptInclusionEvidence, } from "./receipts.js";
+export { GOVERNANCE_EVENT_KINDS, GOVERNANCE_MODES, GovernanceActorSchema, GovernanceEpochSchema, GovernanceEventSignatureSchema, GovernanceEventV1Schema, GovernanceModeSchema, GovernanceStateV1Schema, isGovernanceMode, parseGovernanceEpoch, parseGovernanceEvent, parseGovernanceState, } from "./governance.js";
+export { MANDATE_ISSUER_CLASSES, StandingMandateV1Schema, mandateSigningFields, parseStandingMandate, validateMandateValidity, verifyMandateSignature, } from "./mandates.js";
+export { SignedEmergencyOverrideV1Schema, emergencyOverrideSigningFields, parseSignedEmergencyOverride, validateEmergencyOverrideValidity, verifyEmergencyOverrideSignature, } from "./emergency-override.js";
+export { AUTHORIZATION_CLASSES, AUTHZ, DISPOSITION_DECISIONS, isAuthorizationClass, isDispositionDecision, parseDispositionDecision, } from "./disposition.js";
+export { CapsuleAdoptionDisclosureSummarySchema, TrustStateCapsuleV2Schema, parseTrustStateCapsule, validateCapsuleAdoptionConsistency, } from "./capsules.js";
+export { ADOPTION_OVERLAY_FLAGS, ADOPTION_STATES, AdoptionStateRecordV1Schema, AdoptionStateRecordV2Schema, ENFORCEMENT_GRADES, parseAdoptionStateRecord, } from "./adoption.js";
+export { ADOPTION_ASSURANCE_CLASSES, AdoptionDisclosureV1Schema, maxJustifiedConclusion, parseAdoptionDisclosure, } from "./adoption-disclosure.js";
+export { EvidenceEnvelopeV1Schema, parseEvidenceEnvelope, } from "./evidence.js";
+export { QUORUM_CLASSES, QUORUM_VOTES, QuorumBallotV1Schema, QuorumEvidencePackageV1Schema, QuorumProposalV1Schema, computeQuorumEvidenceDigest, parseQuorumBallot, parseQuorumEvidencePackage, parseQuorumProposal, validateBallotAgainstProposal, } from "./quorum.js";
+export { DEFAULT_WORKSPACE_PROFILE, resolveWorkspaceRoot, workspaceFile, absolutizeWorkspacePath, } from "./workspace-profile.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,gCAAyC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAgB,CAAC;AAChD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,CAAC;AAEzC,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,cAAc,EACd,MAAM,EACN,WAAW,GAGZ,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,uBAAuB,EACvB,WAAW,EACX,eAAe,GAEhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,uCAAuC,EACvC,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,oCAAoC,EACpC,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,6BAA6B,EAC7B,aAAa,EACb,eAAe,EACf,WAAW,EACX,0BAA0B,EAC1B,oCAAoC,EACpC,qBAAqB,EACrB,gBAAgB,EAChB,0BAA0B,EAC1B,mCAAmC,GAgBpC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,aAAa,EACb,2BAA2B,EAC3B,iCAAiC,EACjC,UAAU,GAKX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,GAKlB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,uBAAuB,EACvB,6BAA6B,GAK9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,8BAA8B,EAC9B,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GAQrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,GAQvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,4BAA4B,EAC5B,iCAAiC,EACjC,gCAAgC,GAOjC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,KAAK,EACL,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GAIzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,sCAAsC,EACtC,yBAAyB,EACzB,sBAAsB,EACtB,kCAAkC,GAKnC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,GAQzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,qBAAqB,GAGtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,6BAA6B,EAC7B,sBAAsB,EACtB,2BAA2B,EAC3B,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,GAU9B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,aAAa,EACb,uBAAuB,GAIxB,MAAM,wBAAwB,CAAC"}

package/dist/mandates.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Standing mandate schema — signed or allowlist-backed authorization
+ * consumed by the unattended disposition engine.
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const MANDATE_ISSUER_CLASSES: readonly ["operator", "peer-quorum", "steward-quorum", "standing-allowlist"];
+export type MandateIssuerClass = (typeof MANDATE_ISSUER_CLASSES)[number];
+export declare const StandingMandateV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    mandateId: import("@sinclair/typebox").TString;
+    issuerClass: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"standing-allowlist" | "operator" | "peer-quorum" | "steward-quorum">, ...import("@sinclair/typebox").TLiteral<"standing-allowlist" | "operator" | "peer-quorum" | "steward-quorum">[]]>;
+    issuerId: import("@sinclair/typebox").TString;
+    scope: import("@sinclair/typebox").TObject<{
+        classifications: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    }>;
+    budgets: import("@sinclair/typebox").TObject<{
+        maxActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        remainingActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>;
+    validFrom: import("@sinclair/typebox").TString;
+    validTo: import("@sinclair/typebox").TString;
+    revocable: import("@sinclair/typebox").TBoolean;
+    revoked: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    evidenceRef: import("@sinclair/typebox").TString;
+    quorumRef: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    publicKey: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    signature: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export type StandingMandateV1 = Static<typeof StandingMandateV1Schema>;
+/** Mutable runtime counters — never part of the signed grant payload. */
+export type MandateLedgerEntry = {
+    remainingActions?: number;
+    revoked?: boolean;
+};
+/**
+ * Shared on-disk mandate store shape (enforcement-core + trust-core).
+ * `ledgers` is additive; absent keys mean unlimited budget / not revoked.
+ */
+export type MandateStoreFile = {
+    schemaVersion: 1;
+    mandates: StandingMandateV1[];
+    ledgers?: Record<string, MandateLedgerEntry>;
+};
+export type MandateParseResult = {
+    ok: true;
+    mandate: StandingMandateV1;
+} | {
+    ok: false;
+    error: string;
+};
+export type MandateValidityPolicy = {
+    /** Verifier clock — not signer-controlled. */
+    nowMs: number;
+};
+export type MandateValidity = {
+    valid: boolean;
+    reason: string;
+};
+export declare function parseStandingMandate(input: unknown): MandateParseResult;
+/**
+ * Temporal / revocation check for a schema-valid mandate.
+ * Budget debit and signature verification live in the plugin mandate store.
+ */
+export declare function validateMandateValidity(mandate: StandingMandateV1, policy: MandateValidityPolicy): MandateValidity;
+/**
+ * Canonical unsigned payload for new mandate signatures.
+ * Excludes `signature`, `revoked`, and `budgets.remainingActions` so debit/revoke
+ * can mutate an unsigned ledger without invalidating the grant.
+ */
+export declare function mandateSigningFields(mandate: StandingMandateV1): Record<string, unknown>;
+/**
+ * Dual-verify mandate signatures:
+ * 1. New payload (`mandateSigningFields`) — preferred for newly issued grants.
+ * 2. Legacy payload (full object minus `signature`) — undebited historical files.
+ *
+ * Standing-allowlist mandates are unsigned by design.
+ */
+export declare function verifyMandateSignature(mandate: StandingMandateV1): boolean;
+//# sourceMappingURL=mandates.d.ts.map