@getvda/witness 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Witness contract types — mirrored from the live OpenAPI at
+ * https://witness.getvda.ai/openapi.json (verified 2026-07-18). Only the fields
+ * ACP produces/consumes are modelled; unknown fields are preserved via index
+ * signatures so records round-trip intact.
+ */
+export interface Actor {
+    readonly id: string;
+    readonly type: 'human' | 'agent' | 'system';
+    readonly role?: string;
+}
+/** A rule governing a decision. `ref` required; `text`/`hash` optional. */
+export interface GoverningClause {
+    readonly ref: string;
+    readonly text?: string;
+    readonly hash?: string;
+}
+/** Content-addressed evidence. `hash` is REQUIRED (sha256:<hex>). This is where a
+ *  git commit reference rides (ref = commit URL/sha, hash = sha256 of content). */
+export interface Evidence {
+    readonly ref: string;
+    readonly hash: string;
+    readonly media_type?: string;
+    readonly description?: string;
+    readonly captured_at?: string;
+}
+export type Disposition = 'approved' | 'rejected' | 'escalated' | 'modified';
+/** POST /api/witness/seal/hitl-decision request. */
+export interface HitlDecisionParams {
+    readonly actor: Actor & {
+        type: 'human';
+    };
+    readonly decision: {
+        statement: string;
+        disposition?: Disposition;
+    };
+    readonly governing_clauses: readonly GoverningClause[];
+    readonly evidence?: readonly Evidence[];
+    readonly evidence_omitted_reason?: string;
+    readonly basis_captured_at: string;
+    readonly decision_context?: string;
+    readonly chainKey?: string;
+    readonly decisionId?: string;
+}
+export interface RecordProof {
+    readonly algorithm: string;
+    readonly signature: string;
+    readonly created: string;
+}
+export interface WitnessRecord {
+    readonly schema: string;
+    readonly recordId: string;
+    readonly account?: string;
+    readonly seq?: number;
+    readonly issuedAt?: string;
+    /** Real Witness returns a signer OBJECT (keyId, custody, algorithm,
+     *  publicKeyJwk) for customer-managed records; older shapes used a string. */
+    readonly signer?: unknown;
+    readonly prevHash?: string | null;
+    readonly proof?: RecordProof;
+    readonly [key: string]: unknown;
+}
+export interface SealedRecord {
+    readonly record: WitnessRecord;
+    readonly bodyHash?: string;
+    readonly sealed: boolean;
+    readonly anchored: boolean;
+    readonly sealedState: string;
+}
+/** POST /api/witness/seal/attestation — required [actor, claim, as_of]. Used for
+ *  governance version-activation (claim references the git commit hash). */
+export interface AttestationParams {
+    readonly actor: Actor;
+    readonly claim: string;
+    readonly as_of: string;
+    readonly evidence?: readonly Evidence[];
+    readonly governing_basis?: GoverningClause;
+    readonly context?: string;
+    readonly chainKey?: string;
+    readonly decisionId?: string;
+}
+/** POST /api/witness/seal/agent-action — required [actor, action, governing_rule].
+ *  Used by the evaluator SDK to seal a runtime evaluation outcome. */
+export interface AgentActionParams {
+    readonly actor: Actor & {
+        type: 'agent' | 'system';
+    };
+    readonly action: {
+        statement: string;
+        outcome?: string;
+        rationale?: string;
+    };
+    readonly governing_rule: GoverningClause;
+    readonly evidence?: readonly Evidence[];
+    readonly parameters?: Record<string, unknown>;
+    readonly evidence_omitted_reason?: string;
+    readonly agent_context?: Record<string, unknown>;
+    readonly basis_captured_at?: string;
+    readonly chainKey?: string;
+    readonly decisionId?: string;
+}
+export interface WhoAmI {
+    readonly account_id: string;
+    readonly tier: 'SEALED' | 'ANCHORED';
+    readonly scopes: readonly string[];
+    readonly compliance: boolean;
+    readonly key_id: string;
+    readonly revoked: boolean;
+    readonly expires_at: string | null;
+}
+export interface VerifyResult {
+    readonly ok: boolean;
+    readonly bodyHash?: string;
+    readonly signatureValid: boolean;
+    readonly errors?: readonly string[];
+}
+/**
+ * The Witness surface ACP uses. A real HTTP client and a no-network fake both
+ * implement this — the same substrate-with-a-fake pattern as the git provider,
+ * so the whole approval loop runs before Mike provisions ACP's Witness account.
+ */
+export interface WitnessClient {
+    /** Seal a HITL decision (customer-managed custody in the real client). */
+    sealHitlDecision(params: HitlDecisionParams): Promise<SealedRecord>;
+    /** Seal an attestation (e.g. a governance version activation). */
+    sealAttestation(params: AttestationParams): Promise<SealedRecord>;
+    /** Seal an agent action (e.g. a runtime evaluation outcome). */
+    sealAgentAction(params: AgentActionParams): Promise<SealedRecord>;
+    /** Contract A — resolve the account behind the API key. */
+    whoami(): Promise<WhoAmI>;
+    /** Public verification of a sealed record's signature/chain. */
+    verify(record: WitnessRecord): Promise<VerifyResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;mFACmF;AACnF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;AAE7E,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,iBAAiB,EAAE,SAAS,eAAe,EAAE,CAAC;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;kFAC8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;4EAC4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;sEACsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAA;KAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,kEAAkE;IAClE,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,gEAAgE;IAChE,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,2DAA2D;IAC3D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,gEAAgE;IAChE,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACtD"}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * Witness contract types — mirrored from the live OpenAPI at
+ * https://witness.getvda.ai/openapi.json (verified 2026-07-18). Only the fields
+ * ACP produces/consumes are modelled; unknown fields are preserved via index
+ * signatures so records round-trip intact.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@getvda/witness",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "Witness sealing substrate for ACP. Real HTTP client (customer-managed custody: prepare→sign→submit) + a no-network fake for tests/demo. Seals hitl_decision / agent_action to witness.getvda.ai.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc --build",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/getvda-ai/acp-agent.git",
+    "directory": "packages/witness"
+  },
+  "homepage": "https://getvda.ai"
+}