@grantex/conformance 0.1.0

package/dist/reporter.js

@@ -0,0 +1,72 @@
+import chalk from 'chalk';
+function statusIcon(status) {
+    switch (status) {
+        case 'pass':
+            return chalk.green('✓');
+        case 'fail':
+            return chalk.red('✗');
+        case 'skip':
+            return chalk.yellow('○');
+    }
+}
+function statusLabel(status) {
+    switch (status) {
+        case 'pass':
+            return chalk.green('PASS');
+        case 'fail':
+            return chalk.red('FAIL');
+        case 'skip':
+            return chalk.yellow('SKIP');
+    }
+}
+function formatDuration(ms) {
+    if (ms < 1000)
+        return `${ms}ms`;
+    return `${(ms / 1000).toFixed(2)}s`;
+}
+export function reportText(report) {
+    const lines = [];
+    lines.push('');
+    lines.push(chalk.bold('Grantex Conformance Test Suite'));
+    lines.push(chalk.dim('─'.repeat(50)));
+    lines.push('');
+    for (const suite of report.suites) {
+        const tag = suite.optional ? chalk.dim(' (optional)') : '';
+        lines.push(chalk.bold(`  ${suite.name}${tag}`));
+        lines.push(chalk.dim(`  ${suite.description}`));
+        lines.push('');
+        for (const t of suite.tests) {
+            const duration = chalk.dim(`(${formatDuration(t.durationMs)})`);
+            const ref = chalk.dim(`[${t.specRef}]`);
+            lines.push(`    ${statusIcon(t.status)} ${t.name} ${duration} ${ref}`);
+            if (t.error) {
+                lines.push(chalk.red(`      ${t.error}`));
+            }
+        }
+        lines.push('');
+    }
+    lines.push(chalk.dim('─'.repeat(50)));
+    const { total, passed, failed, skipped, durationMs } = report.summary;
+    const parts = [];
+    if (passed > 0)
+        parts.push(chalk.green(`${passed} passed`));
+    if (failed > 0)
+        parts.push(chalk.red(`${failed} failed`));
+    if (skipped > 0)
+        parts.push(chalk.yellow(`${skipped} skipped`));
+    parts.push(`${total} total`);
+    lines.push(`  ${parts.join(', ')} ${chalk.dim(`in ${formatDuration(durationMs)}`)}`);
+    lines.push('');
+    if (failed === 0) {
+        lines.push(chalk.green.bold('  All tests passed!'));
+    }
+    else {
+        lines.push(chalk.red.bold(`  ${failed} test(s) failed.`));
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+export function reportJson(report) {
+    return JSON.stringify(report, null, 2);
+}
+//# sourceMappingURL=reporter.js.map

package/dist/reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.js","sourceRoot":"","sources":["../src/reporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,SAAS,UAAU,CAAC,MAA4B;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA4B;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAC;IAChC,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAE7B,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,kBAAkB,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/runner.d.ts

@@ -0,0 +1,3 @@
+import type { RunConfig, ConformanceReport } from './types.js';
+export declare function runConformanceTests(config: RunConfig): Promise<ConformanceReport>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAA2D,MAAM,YAAY,CAAC;AAqFxH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA6FvF"}

package/dist/runner.js

@@ -0,0 +1,160 @@
+import { ConformanceHttpClient } from './http-client.js';
+import { CleanupTracker } from './cleanup.js';
+import { AuthFlowHelper } from './flow.js';
+// Core suites
+import { healthSuite } from './suites/health.js';
+import { agentsSuite } from './suites/agents.js';
+import { authorizeSuite } from './suites/authorize.js';
+import { tokenSuite } from './suites/token.js';
+import { tokensSuite } from './suites/tokens.js';
+import { grantsSuite } from './suites/grants.js';
+import { delegationSuite } from './suites/delegation.js';
+import { auditSuite } from './suites/audit.js';
+import { securitySuite } from './suites/security.js';
+// Optional suites
+import { policiesSuite } from './suites/policies.js';
+import { webhooksSuite } from './suites/webhooks.js';
+import { scimSuite } from './suites/scim.js';
+import { ssoSuite } from './suites/sso.js';
+import { anomaliesSuite } from './suites/anomalies.js';
+import { complianceSuite } from './suites/compliance.js';
+const coreSuites = [
+    healthSuite,
+    agentsSuite,
+    authorizeSuite,
+    tokenSuite,
+    tokensSuite,
+    grantsSuite,
+    delegationSuite,
+    auditSuite,
+    securitySuite,
+];
+const optionalSuites = [
+    policiesSuite,
+    webhooksSuite,
+    scimSuite,
+    ssoSuite,
+    anomaliesSuite,
+    complianceSuite,
+];
+async function setupSharedAgent(http) {
+    const listRes = await http.get('/v1/agents');
+    if (listRes.status === 200 && Array.isArray(listRes.body.agents) && listRes.body.agents.length > 0) {
+        // Pick the first agent with read+write scopes as shared
+        const withScopes = listRes.body.agents.find((a) => a.scopes.includes('read') && a.scopes.includes('write'));
+        const agent = withScopes ?? listRes.body.agents[0];
+        // Ensure it has the scopes we need
+        if (!agent.scopes.includes('read') || !agent.scopes.includes('write')) {
+            await http.patch(`/v1/agents/${agent.agentId}`, { scopes: ['read', 'write'] });
+        }
+        // Try to delete all OTHER agents to free up plan slots (best-effort)
+        for (const other of listRes.body.agents) {
+            if (other.agentId !== agent.agentId) {
+                try {
+                    await http.delete(`/v1/agents/${other.agentId}`);
+                }
+                catch {
+                    // FK constraint may prevent deletion — that's OK
+                }
+            }
+        }
+        return { agentId: agent.agentId, agentDid: agent.did, name: agent.name };
+    }
+    // No agents exist — create one
+    const res = await http.post('/v1/agents', {
+        name: 'conformance-shared',
+        scopes: ['read', 'write'],
+    });
+    if (res.status !== 201) {
+        throw new Error(`Failed to create shared agent: ${res.status} ${res.rawText}`);
+    }
+    return { agentId: res.body.agentId, agentDid: res.body.did, name: res.body.name };
+}
+export async function runConformanceTests(config) {
+    const setupHttp = new ConformanceHttpClient(config.baseUrl, config.apiKey);
+    // Set up a shared agent for all suites (reuses existing or creates new)
+    const sharedAgent = await setupSharedAgent(setupHttp);
+    const allSuites = [...coreSuites];
+    if (config.include) {
+        for (const ext of config.include) {
+            const found = optionalSuites.find((s) => s.name === ext);
+            if (found) {
+                allSuites.push(found);
+            }
+        }
+    }
+    let suitesToRun = allSuites;
+    if (config.suite) {
+        suitesToRun = allSuites.filter((s) => s.name === config.suite);
+        if (suitesToRun.length === 0) {
+            const available = allSuites.map((s) => s.name).join(', ');
+            throw new Error(`Unknown suite "${config.suite}". Available: ${available}`);
+        }
+    }
+    const results = [];
+    const overallStart = Date.now();
+    let bailed = false;
+    for (const suite of suitesToRun) {
+        if (bailed)
+            break;
+        const http = new ConformanceHttpClient(config.baseUrl, config.apiKey);
+        const cleanup = new CleanupTracker(http);
+        const flow = new AuthFlowHelper(http, cleanup);
+        const ctx = {
+            baseUrl: config.baseUrl,
+            apiKey: config.apiKey,
+            http,
+            flow,
+            cleanup,
+            sharedAgent,
+        };
+        const suiteStart = Date.now();
+        try {
+            const tests = await suite.run(ctx);
+            results.push({
+                name: suite.name,
+                description: suite.description,
+                optional: suite.optional,
+                tests,
+                durationMs: Date.now() - suiteStart,
+            });
+            if (config.bail && tests.some((t) => t.status === 'fail')) {
+                bailed = true;
+            }
+        }
+        catch (err) {
+            results.push({
+                name: suite.name,
+                description: suite.description,
+                optional: suite.optional,
+                tests: [
+                    {
+                        name: `${suite.name} setup`,
+                        status: 'fail',
+                        durationMs: Date.now() - suiteStart,
+                        specRef: '',
+                        error: err instanceof Error ? err.message : String(err),
+                    },
+                ],
+                durationMs: Date.now() - suiteStart,
+            });
+            if (config.bail)
+                bailed = true;
+        }
+        finally {
+            await cleanup.teardown();
+        }
+    }
+    const allTests = results.flatMap((s) => s.tests);
+    return {
+        suites: results,
+        summary: {
+            total: allTests.length,
+            passed: allTests.filter((t) => t.status === 'pass').length,
+            failed: allTests.filter((t) => t.status === 'fail').length,
+            skipped: allTests.filter((t) => t.status === 'skip').length,
+            durationMs: Date.now() - overallStart,
+        },
+    };
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,cAAc;AACd,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,kBAAkB;AAClB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,UAAU,GAAsB;IACpC,WAAW;IACX,WAAW;IACX,cAAc;IACd,UAAU;IACV,WAAW;IACX,WAAW;IACX,eAAe;IACf,UAAU;IACV,aAAa;CACd,CAAC;AAEF,MAAM,cAAc,GAAsB;IACxC,aAAa;IACb,aAAa;IACb,SAAS;IACT,QAAQ;IACR,cAAc;IACd,eAAe;CAChB,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAAC,IAA2B;IACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAsF,YAAY,CAAC,CAAC;IAElI,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnG,wDAAwD;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAC/D,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAEpD,mCAAmC;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,qEAAqE;QACrE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,iDAAiD;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IAED,+BAA+B;IAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAiD,YAAY,EAAE;QACxF,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;KAC1B,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAiB;IACzD,MAAM,SAAS,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAE3E,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAElC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,GAAG,SAAS,CAAC;IAC5B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,KAAK,iBAAiB,SAAS,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,MAAM;YAAE,MAAM;QAElB,MAAM,IAAI,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,GAAG,GAAiB;YACxB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI;YACJ,IAAI;YACJ,OAAO;YACP,WAAW;SACZ,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK;gBACL,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;aACpC,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC1D,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,QAAQ;wBAC3B,MAAM,EAAE,MAAM;wBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;wBACnC,OAAO,EAAE,EAAE;wBACX,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD;iBACF;gBACD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;aACpC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM,GAAG,IAAI,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,MAAM,EAAE,OAAO;QACf,OAAO,EAAE;YACP,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;YAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;YAC1D,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;YAC3D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY;SACtC;KACF,CAAC;AACJ,CAAC"}

package/dist/suites/agents.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const agentsSuite: SuiteDefinition;
+//# sourceMappingURL=agents.d.ts.map

package/dist/suites/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/suites/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,WAAW,EAAE,eA4EzB,CAAC"}

package/dist/suites/agents.js

@@ -0,0 +1,53 @@
+import { test, skip, expectStatus, expectKeys, expectString, expectArray } from '../helpers.js';
+export const agentsSuite = {
+    name: 'agents',
+    description: 'Agent registration and management (CRUD)',
+    optional: false,
+    run: async (ctx) => {
+        const results = [];
+        const sharedId = ctx.sharedAgent.agentId;
+        let crudAgentId = '';
+        // Try to create a fresh agent for CRUD tests
+        const createRes = await ctx.http.post('/v1/agents', {
+            name: `conformance-crud-${Date.now()}`,
+            scopes: ['read', 'write'],
+        });
+        if (createRes.status === 201) {
+            crudAgentId = createRes.body.agentId;
+        }
+        results.push(crudAgentId
+            ? await test('POST /v1/agents creates agent with agentId and did', '§10', async () => {
+                expectKeys(createRes.body, ['agentId', 'did', 'name', 'scopes', 'status', 'createdAt']);
+                expectString(createRes.body.agentId, 'agentId');
+                expectString(createRes.body.did, 'did');
+            })
+            : skip('POST /v1/agents creates agent with agentId and did', '§10', 'Plan limit reached — cannot create test agent'));
+        results.push(await test('GET /v1/agents lists agents', '§10', async () => {
+            const res = await ctx.http.get('/v1/agents');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['agents']);
+            expectArray(res.body.agents, 'agents');
+        }));
+        results.push(await test('GET /v1/agents/:id returns agent details', '§10', async () => {
+            const id = crudAgentId || sharedId;
+            const res = await ctx.http.get(`/v1/agents/${id}`);
+            expectStatus(res, 200);
+            expectKeys(res.body, ['agentId', 'did', 'name', 'scopes', 'status']);
+        }));
+        results.push(await test('PATCH /v1/agents/:id updates agent', '§10', async () => {
+            const id = crudAgentId || sharedId;
+            const newName = `updated-${Date.now()}`;
+            const res = await ctx.http.patch(`/v1/agents/${id}`, { name: newName });
+            expectStatus(res, 200);
+            expectKeys(res.body, ['agentId', 'name']);
+        }));
+        results.push(crudAgentId
+            ? await test('DELETE /v1/agents/:id returns 204', '§10', async () => {
+                const res = await ctx.http.delete(`/v1/agents/${crudAgentId}`);
+                expectStatus(res, 204);
+            })
+            : skip('DELETE /v1/agents/:id returns 204', '§10', 'Plan limit reached — no test agent to delete'));
+        return results;
+    },
+};
+//# sourceMappingURL=agents.js.map

package/dist/suites/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/suites/agents.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEhG,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,KAAK;IACf,GAAG,EAAE,KAAK,EAAE,GAAiB,EAAyB,EAAE;QACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;QACzC,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,6CAA6C;QAC7C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAKlC,YAAY,EAAE;YACf,IAAI,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,EAAE;YACtC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC1B,CAAC,CAAC;QAEH,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,IAAI,CACV,WAAW;YACT,CAAC,CAAC,MAAM,IAAI,CAAC,oDAAoD,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;gBACjF,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;gBACxF,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAChD,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,oDAAoD,EAAE,KAAK,EAAE,+CAA+C,CAAC,CACvH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAwB,YAAY,CAAC,CAAC;YACpE,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,0CAA0C,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,EAAE,GAAG,WAAW,IAAI,QAAQ,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAsB,cAAc,EAAE,EAAE,CAAC,CAAC;YACxE,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,EAAE,GAAG,WAAW,IAAI,QAAQ,CAAC;YACnC,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAC9B,cAAc,EAAE,EAAE,EAClB,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CAAC;YACF,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,WAAW;YACT,CAAC,CAAC,MAAM,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,WAAW,EAAE,CAAC,CAAC;gBAC/D,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,8CAA8C,CAAC,CACrG,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/suites/anomalies.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const anomaliesSuite: SuiteDefinition;
+//# sourceMappingURL=anomalies.d.ts.map

package/dist/suites/anomalies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anomalies.d.ts","sourceRoot":"","sources":["../../src/suites/anomalies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,cAAc,EAAE,eAsC5B,CAAC"}

package/dist/suites/anomalies.js

@@ -0,0 +1,27 @@
+import { test, expectStatus, expectKeys, expectArray } from '../helpers.js';
+export const anomaliesSuite = {
+    name: 'anomalies',
+    description: 'Anomaly detection and acknowledgement',
+    optional: true,
+    run: async (ctx) => {
+        const results = [];
+        results.push(await test('POST /v1/anomalies/detect runs detection (200)', '§12', async () => {
+            const res = await ctx.http.post('/v1/anomalies/detect');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['detectedAt', 'total', 'anomalies']);
+            expectArray(res.body.anomalies, 'anomalies');
+        }));
+        results.push(await test('GET /v1/anomalies lists anomalies', '§12', async () => {
+            const res = await ctx.http.get('/v1/anomalies');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['anomalies', 'total']);
+            expectArray(res.body.anomalies, 'anomalies');
+        }));
+        results.push(await test('PATCH /v1/anomalies/:id/acknowledge returns 404 for invalid ID', '§12', async () => {
+            const res = await ctx.http.patch('/v1/anomalies/nonexistent-id/acknowledge');
+            expectStatus(res, 404);
+        }));
+        return results;
+    },
+};
+//# sourceMappingURL=anomalies.js.map

package/dist/suites/anomalies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anomalies.js","sourceRoot":"","sources":["../../src/suites/anomalies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5E,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,uCAAuC;IACpD,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,EAAE,GAAiB,EAAyB,EAAE;QACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,gDAAgD,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAI5B,sBAAsB,CAAC,CAAC;YAC3B,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3D,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,mCAAmC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAA0C,eAAe,CAAC,CAAC;YACzF,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7C,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,gEAAgE,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAC7F,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC7E,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/suites/audit.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const auditSuite: SuiteDefinition;
+//# sourceMappingURL=audit.d.ts.map

package/dist/suites/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/suites/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,UAAU,EAAE,eAwGxB,CAAC"}

package/dist/suites/audit.js

@@ -0,0 +1,70 @@
+import { test, expectStatus, expectKeys, expectString, expectArray, expectEqual } from '../helpers.js';
+export const auditSuite = {
+    name: 'audit',
+    description: 'Audit logging with hash chain integrity',
+    optional: false,
+    run: async (ctx) => {
+        const results = [];
+        const { agentId, agentDid } = ctx.sharedAgent;
+        // Get a flow using the shared agent
+        const flow = await ctx.flow.executeFullFlow({
+            agentId,
+            agentDid,
+            scopes: ['read'],
+        });
+        let entry1Id = '';
+        let entry1Hash = '';
+        results.push(await test('POST /v1/audit/log creates entry with entryId, hash, prevHash (201)', '§8', async () => {
+            const res = await ctx.http.post('/v1/audit/log', {
+                agentId: flow.agentId,
+                agentDid: flow.agentDid,
+                grantId: flow.grantId,
+                principalId: flow.principalId,
+                action: 'conformance.test.1',
+            });
+            expectStatus(res, 201);
+            expectKeys(res.body, ['entryId', 'hash', 'prevHash']);
+            expectString(res.body.entryId, 'entryId');
+            expectString(res.body.hash, 'hash');
+            entry1Id = res.body.entryId;
+            entry1Hash = res.body.hash;
+        }));
+        results.push(await test('Hash chain integrity: entry2.prevHash === entry1.hash', '§8', async () => {
+            const res = await ctx.http.post('/v1/audit/log', {
+                agentId: flow.agentId,
+                agentDid: flow.agentDid,
+                grantId: flow.grantId,
+                principalId: flow.principalId,
+                action: 'conformance.test.2',
+            });
+            expectStatus(res, 201);
+            const entry2PrevHash = res.body.prevHash;
+            if (entry1Hash && entry2PrevHash) {
+                expectEqual(entry2PrevHash, entry1Hash, 'prevHash chain');
+            }
+        }));
+        results.push(await test('GET /v1/audit/entries returns entries list', '§8', async () => {
+            const res = await ctx.http.get('/v1/audit/entries');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['entries']);
+            expectArray(res.body.entries, 'entries');
+        }));
+        results.push(await test('GET /v1/audit/:id returns single entry', '§8', async () => {
+            if (!entry1Id)
+                throw new Error('No audit entry created');
+            const res = await ctx.http.get(`/v1/audit/${entry1Id}`);
+            expectStatus(res, 200);
+            expectKeys(res.body, ['entryId', 'hash', 'action']);
+            expectEqual(res.body.entryId, entry1Id, 'entryId');
+        }));
+        results.push(await test('Audit hash is a valid SHA-256 hex string', '§8', async () => {
+            if (!entry1Hash)
+                throw new Error('No hash from previous test');
+            if (!/^[a-f0-9]{64}$/i.test(entry1Hash)) {
+                throw new Error(`Expected SHA-256 hex hash, got: ${entry1Hash}`);
+            }
+        }));
+        return results;
+    },
+};
+//# sourceMappingURL=audit.js.map

package/dist/suites/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/suites/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEvG,MAAM,CAAC,MAAM,UAAU,GAAoB;IACzC,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,yCAAyC;IACtD,QAAQ,EAAE,KAAK;IACf,GAAG,EAAE,KAAK,EAAE,GAAiB,EAAyB,EAAE;QACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;QAE9C,oCAAoC;QACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;YAC1C,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,CAAC,MAAM,CAAC;SACjB,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,UAAU,GAAG,EAAE,CAAC;QAEpB,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CACR,qEAAqE,EACrE,IAAI,EACJ,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAI5B,eAAe,EAAE;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;YACtD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC1C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,CAAC,CACF,CACF,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CACR,uDAAuD,EACvD,IAAI,EACJ,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAI5B,eAAe,EAAE;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,QAAkB,CAAC;YAEnD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;gBACjC,WAAW,CAAC,cAAc,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CACF,CACF,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,4CAA4C,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAyB,mBAAmB,CAAC,CAAC;YAC5E,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAClC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,wCAAwC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;YACpE,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAI3B,aAAa,QAAQ,EAAE,CAAC,CAAC;YAC5B,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,0CAA0C,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE;YACtE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC/D,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/suites/authorize.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const authorizeSuite: SuiteDefinition;
+//# sourceMappingURL=authorize.d.ts.map

package/dist/suites/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/suites/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,cAAc,EAAE,eA8E5B,CAAC"}

package/dist/suites/authorize.js

@@ -0,0 +1,54 @@
+import { test, expectStatus, expectKeys, expectString, expectIsoDate } from '../helpers.js';
+export const authorizeSuite = {
+    name: 'authorize',
+    description: 'Authorization request creation and consent flow',
+    optional: false,
+    run: async (ctx) => {
+        const results = [];
+        const { agentId } = ctx.sharedAgent;
+        results.push(await test('POST /v1/authorize returns authRequestId, consentUrl, expiresAt (201)', '§5.1', async () => {
+            const res = await ctx.http.post('/v1/authorize', {
+                agentId,
+                principalId: `principal-${Date.now()}`,
+                scopes: ['read'],
+            });
+            expectStatus(res, 201);
+            expectKeys(res.body, ['authRequestId', 'consentUrl', 'expiresAt']);
+            expectString(res.body.authRequestId, 'authRequestId');
+            expectString(res.body.consentUrl, 'consentUrl');
+            expectIsoDate(res.body.expiresAt, 'expiresAt');
+        }));
+        results.push(await test('POST /v1/authorize rejects missing required fields (400)', '§5.1', async () => {
+            const res = await ctx.http.post('/v1/authorize', {});
+            expectStatus(res, 400);
+        }));
+        results.push(await test('POST /v1/authorize rejects non-existent agent (404)', '§5.1', async () => {
+            const res = await ctx.http.post('/v1/authorize', {
+                agentId: 'nonexistent-agent-id',
+                principalId: 'principal-test',
+                scopes: ['read'],
+            });
+            expectStatus(res, 404);
+        }));
+        results.push(await test('Consent approval produces authorization code', '§5.2', async () => {
+            const authRes = await ctx.http.post('/v1/authorize', {
+                agentId,
+                principalId: `principal-consent-${Date.now()}`,
+                scopes: ['read'],
+            });
+            expectStatus(authRes, 201);
+            let code;
+            if (authRes.body.code) {
+                code = authRes.body.code;
+            }
+            else {
+                const consentRes = await ctx.http.requestPublic('POST', `/v1/consent/${authRes.body.authRequestId}/approve`);
+                expectStatus(consentRes, 200);
+                code = consentRes.body.code;
+            }
+            expectString(code, 'code');
+        }));
+        return results;
+    },
+};
+//# sourceMappingURL=authorize.js.map

package/dist/suites/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/suites/authorize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5F,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,iDAAiD;IAC9D,QAAQ,EAAE,KAAK;IACf,GAAG,EAAE,KAAK,EAAE,GAAiB,EAAyB,EAAE;QACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;QAEpC,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CACR,uEAAuE,EACvE,MAAM,EACN,KAAK,IAAI,EAAE;YACT,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAI5B,eAAe,EAAE;gBAClB,OAAO;gBACP,WAAW,EAAE,aAAa,IAAI,CAAC,GAAG,EAAE,EAAE;gBACtC,MAAM,EAAE,CAAC,MAAM,CAAC;aACjB,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;YACnE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YACtD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAChD,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC,CACF,CACF,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,0DAA0D,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YACrD,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,qDAAqD,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;gBAC/C,OAAO,EAAE,sBAAsB;gBAC/B,WAAW,EAAE,gBAAgB;gBAC7B,MAAM,EAAE,CAAC,MAAM,CAAC;aACjB,CAAC,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,8CAA8C,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAGhC,eAAe,EAAE;gBAClB,OAAO;gBACP,WAAW,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE;gBAC9C,MAAM,EAAE,CAAC,MAAM,CAAC;aACjB,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE3B,IAAI,IAAY,CAAC;YACjB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAC7C,MAAM,EACN,eAAe,OAAO,CAAC,IAAI,CAAC,aAAa,UAAU,CACpD,CAAC;gBACF,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC9B,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,CAAC;YACD,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/suites/compliance.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const complianceSuite: SuiteDefinition;
+//# sourceMappingURL=compliance.d.ts.map

package/dist/suites/compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.d.ts","sourceRoot":"","sources":["../../src/suites/compliance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,eAAe,EAAE,eA0D7B,CAAC"}

package/dist/suites/compliance.js

@@ -0,0 +1,33 @@
+import { test, expectStatus, expectKeys, expectArray } from '../helpers.js';
+export const complianceSuite = {
+    name: 'compliance',
+    description: 'Compliance reporting and evidence export',
+    optional: true,
+    run: async (ctx) => {
+        const results = [];
+        results.push(await test('GET /v1/compliance/summary returns summary', '§12', async () => {
+            const res = await ctx.http.get('/v1/compliance/summary');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['generatedAt', 'agents', 'grants', 'auditEntries', 'policies']);
+        }));
+        results.push(await test('GET /v1/compliance/export/grants returns grants export', '§12', async () => {
+            const res = await ctx.http.get('/v1/compliance/export/grants');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['generatedAt', 'total', 'grants']);
+            expectArray(res.body.grants, 'grants');
+        }));
+        results.push(await test('GET /v1/compliance/export/audit returns audit export', '§12', async () => {
+            const res = await ctx.http.get('/v1/compliance/export/audit');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['generatedAt', 'total', 'entries']);
+            expectArray(res.body.entries, 'entries');
+        }));
+        results.push(await test('GET /v1/compliance/evidence-pack returns evidence pack', '§12', async () => {
+            const res = await ctx.http.get('/v1/compliance/evidence-pack');
+            expectStatus(res, 200);
+            expectKeys(res.body, ['meta', 'summary', 'grants', 'auditEntries', 'policies', 'chainIntegrity']);
+        }));
+        return results;
+    },
+};
+//# sourceMappingURL=compliance.js.map

package/dist/suites/compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.js","sourceRoot":"","sources":["../../src/suites/compliance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,KAAK,EAAE,GAAiB,EAAyB,EAAE;QACtD,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAI3B,wBAAwB,CAAC,CAAC;YAC7B,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,wDAAwD,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAI3B,8BAA8B,CAAC,CAAC;YACnC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,sDAAsD,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAI3B,6BAA6B,CAAC,CAAC;YAClC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1D,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,wDAAwD,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAG3B,8BAA8B,CAAC,CAAC;YACnC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACpG,CAAC,CAAC,CACH,CAAC;QAEF,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAC"}

package/dist/suites/delegation.d.ts

@@ -0,0 +1,3 @@
+import type { SuiteDefinition } from '../types.js';
+export declare const delegationSuite: SuiteDefinition;
+//# sourceMappingURL=delegation.d.ts.map

package/dist/suites/delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../../src/suites/delegation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,eAAO,MAAM,eAAe,EAAE,eA8L7B,CAAC"}