@harrylabsj/kiwi 0.6.0

package/dist/fanout/disclosure.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * fanout — 渐进披露构造器（基线 §30 / §29 / §4.4）。
+ *
+ * 同一 RFQ 意图（RfqIntent）按披露档位生成不同 payload：
+ *   - anonymous（round 1 匿名首轮）：SKU + 数量区间，不含精确数量 / 交期 /
+ *     任何身份线索；
+ *   - detailed（round 2 Top N 后）：精确数量 + 交期要求 +（策略允许的 §29 可选项）。
+ *
+ * 私有字段结构性不可能出现：构造器按档位白名单投影 intent —— 预算 / 急迫度 /
+ * 身份 / 联系方式在 AnonymousRfqPayload / DetailedRfqPayload 类型里没有承载字段，
+ * 构造路径也从不读取这些 intent 字段。是构造时排除，而非事后过滤（§30）。
+ *
+ * 每档生成后必须过 NetworkDisclosurePolicy 校验（validateNetworkDisclosure），
+ * 违反即抛 FanoutDisclosureError（fail-closed，§4.6）。校验器本身是纯函数，
+ * 供负向断言直接使用。
+ */
+import type { LineItem } from "../negotiation/domain/common.js";
+import type { Rfq } from "../negotiation/domain/objects.js";
+import type { DisclosureAttribute, DisclosureTier } from "./policy.js";
+/** 单行 intent：精确数量（私有）+ 粗粒度数量区间（匿名档只投影区间）。 */
+export interface RfqIntentItem {
+    sku: string;
+    /** 精确数量（私有，只投影到 detailed，且要求 purchase_quantity 被允许）。 */
+    quantity: number;
+    /** 匿名档披露的粗粒度区间。 */
+    quantity_range: {
+        min: number;
+        max: number;
+    };
+    unit: string;
+}
+/** 内部 RFQ 意图：含私有字段（§4.4 默认 private）。 */
+export interface RfqIntent {
+    items: RfqIntentItem[];
+    /** 精确交期要求（RFC 3339；只进 detailed）。 */
+    delivery_before?: string;
+    /** 预算提示（私有，结构性排除，永不披露）。 */
+    budget?: {
+        currency: string;
+        amount_minor: number;
+    };
+    /** 急迫度（私有，结构性排除）。 */
+    urgency?: string;
+    /** 身份 / 联系方式（私有，结构性排除）。 */
+    contact?: {
+        organization?: string;
+        email?: string;
+        phone?: string;
+    };
+    /** 位置精度（可选披露项，需 disclosure_profile 允许）。 */
+    location_precision?: "city" | "district";
+    /** 客户段（可选披露项，需允许）。 */
+    customer_segment?: string;
+    /** 历史偏好（可选披露项，需允许）。 */
+    preferences?: string[];
+    /** 品类（供 category_sensitivity 判定；构造器不投影）。 */
+    category?: string;
+}
+/** 单 SKU 的数量区间（anonymous 档）。 */
+export interface QuantityRange {
+    sku: string;
+    min: number;
+    max: number;
+}
+export interface AnonymousRfqPayload {
+    tier: "anonymous";
+    rfq: {
+        type: "rfq";
+        /** 区间中点数量（LineItem 要求有效数量；真实信号在 quantity_range）。 */
+        items: LineItem[];
+        requested_terms: {
+            quantity_range: QuantityRange[];
+        };
+    };
+}
+export interface DetailedRfqPayload {
+    tier: "detailed";
+    rfq: Rfq;
+}
+export type DisclosedRfqPayload = AnonymousRfqPayload | DetailedRfqPayload;
+/** 构造/校验失败。携带 NetworkDisclosurePolicy 拒绝原因列表。 */
+export declare class FanoutDisclosureError extends Error {
+    readonly errors: string[];
+    constructor(errors: string[]);
+}
+/**
+ * 永远私有、结构性排除的 §29 属性：即使 disclosure_profile 显式允许也绝不投影
+ * （§4.4 默认 Private：预算 / 急迫度 / 身份 / 联系方式）。校验器同样按此名单拒绝
+ * —— 不在 allowlist 语义里，没有豁免路径。
+ */
+export declare const ALWAYS_PRIVATE_ATTRIBUTES: readonly DisclosureAttribute[];
+/** 区间中点（匿名档的 LineItem quantity；真实信号是区间本身）。 */
+export declare function rangeMidpoint(range: {
+    min: number;
+    max: number;
+}): number;
+export interface DisclosureValidationResult {
+    ok: boolean;
+    errors: string[];
+}
+/**
+ * NetworkDisclosurePolicy 校验（§29 / §30）。纯函数，供每档生成后 fail-closed
+ * 与测试负向断言共用。
+ *
+ * 检查：
+ *   - 永远私有属性结构性缺席（budget/urgency/contact/organization，含子串兜底）；
+ *   - anonymous 档必须带 quantity_range，且不得带 delivery_before；
+ *   - detailed 档可选披露项必须在 allowed_attributes 里；
+ *   - detailed 档精确数量必须在 purchase_quantity 允许时出现，否则必须退回
+ *     quantity_range（policy 门控，§29 purchase quantity）。
+ */
+export declare function validateNetworkDisclosure(payload: DisclosedRfqPayload, allowed: readonly DisclosureAttribute[]): DisclosureValidationResult;
+export interface DisclosureBuildInput {
+    intent: RfqIntent;
+    tier: DisclosureTier;
+    /** §29 属性 allowlist（来自 FanoutPolicy.disclosure_profile.allowed_attributes）。 */
+    allowed_attributes: readonly DisclosureAttribute[];
+}
+/**
+ * 按档位构造披露 payload。构造即排除（白名单投影，不读取私有 intent 字段）；
+ * 生成后立即过 NetworkDisclosurePolicy 校验，失败即抛（fail-closed）。
+ */
+export declare function buildDisclosedRfq(input: DisclosureBuildInput): DisclosedRfqPayload;

package/dist/fanout/disclosure.js

@@ -0,0 +1,188 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { validateRfq } from "../negotiation/domain/objects.js";
+/** 构造/校验失败。携带 NetworkDisclosurePolicy 拒绝原因列表。 */
+export class FanoutDisclosureError extends Error {
+    errors;
+    constructor(errors) {
+        super(`fan-out disclosure payload failed NetworkDisclosurePolicy validation: ${errors.join("; ")}`);
+        this.name = "FanoutDisclosureError";
+        this.errors = errors;
+    }
+}
+// ---------------------------------------------------------------------------
+// 披露档位与 §29 属性映射
+// ---------------------------------------------------------------------------
+/**
+ * 永远私有、结构性排除的 §29 属性：即使 disclosure_profile 显式允许也绝不投影
+ * （§4.4 默认 Private：预算 / 急迫度 / 身份 / 联系方式）。校验器同样按此名单拒绝
+ * —— 不在 allowlist 语义里，没有豁免路径。
+ */
+export const ALWAYS_PRIVATE_ATTRIBUTES = [
+    "budget_hints",
+    "buyer_urgency",
+    "contact_information",
+    "organization_identity",
+];
+/** 子串级兜底（双保险）：这些私钥名一旦出现在序列化 payload 里即拒绝。 */
+const ALWAYS_PRIVATE_KEYS = ["budget", "urgency", "contact", "email", "phone", "organization"];
+/**
+ * detailed 档可选披露项（受 disclosure_profile.allowed_attributes 门控）。
+ * 映射：§29 属性 → intent 读取器。预算/急迫度/身份/联系方式不在其中 ——
+ * 它们结构性排除，构造路径根本不读取。
+ */
+const OPTIONAL_EXTRACTORS = {
+    location_precision: (intent) => intent.location_precision,
+    customer_segment: (intent) => intent.customer_segment,
+    historical_preferences: (intent) => intent.preferences,
+    // 核心字段单独处理；永远私有字段的读取器不存在。
+    purchase_quantity: () => undefined,
+    organization_identity: () => undefined,
+    buyer_urgency: () => undefined,
+    contact_information: () => undefined,
+    budget_hints: () => undefined,
+};
+const OPTIONAL_DETAILED_ATTRIBUTES = [
+    "location_precision",
+    "customer_segment",
+    "historical_preferences",
+];
+function includes(list, value) {
+    return list.includes(value);
+}
+/** 区间中点（匿名档的 LineItem quantity；真实信号是区间本身）。 */
+export function rangeMidpoint(range) {
+    return Math.round((range.min + range.max) / 2);
+}
+/**
+ * NetworkDisclosurePolicy 校验（§29 / §30）。纯函数，供每档生成后 fail-closed
+ * 与测试负向断言共用。
+ *
+ * 检查：
+ *   - 永远私有属性结构性缺席（budget/urgency/contact/organization，含子串兜底）；
+ *   - anonymous 档必须带 quantity_range，且不得带 delivery_before；
+ *   - detailed 档可选披露项必须在 allowed_attributes 里；
+ *   - detailed 档精确数量必须在 purchase_quantity 允许时出现，否则必须退回
+ *     quantity_range（policy 门控，§29 purchase quantity）。
+ */
+export function validateNetworkDisclosure(payload, allowed) {
+    const errors = [];
+    const serialized = JSON.stringify(payload);
+    for (const attr of ALWAYS_PRIVATE_ATTRIBUTES) {
+        if (serialized.includes(`"${attr}"`)) {
+            errors.push(`payload MUST NOT contain always-private attribute "${attr}"`);
+        }
+    }
+    for (const needle of ALWAYS_PRIVATE_KEYS) {
+        if (serialized.includes(`"${needle}`)) {
+            errors.push(`payload MUST NOT contain private field "${needle}"`);
+        }
+    }
+    if (payload.tier === "anonymous") {
+        const terms = payload.rfq.requested_terms;
+        if (terms.quantity_range === undefined || terms.quantity_range.length === 0) {
+            errors.push("anonymous tier MUST carry a non-empty quantity_range");
+        }
+        const asRecord = terms;
+        if (asRecord["delivery_before"] !== undefined) {
+            errors.push("anonymous tier MUST NOT carry delivery_before (exact delivery is private)");
+        }
+    }
+    else {
+        const requested = payload.rfq.requested_terms ?? {};
+        for (const attr of OPTIONAL_DETAILED_ATTRIBUTES) {
+            if (requested[attr] !== undefined && !includes(allowed, attr)) {
+                errors.push(`detailed tier carries "${attr}" but disclosure_profile does not allow it`);
+            }
+        }
+        // 精确数量门控：purchase_quantity 未允许时，detailed 必须退回 quantity_range。
+        const carriesRange = requested["quantity_range"] !== undefined;
+        if (!includes(allowed, "purchase_quantity") && !carriesRange) {
+            errors.push("detailed tier MUST fall back to quantity_range when purchase_quantity is not allowed");
+        }
+    }
+    return { ok: errors.length === 0, errors };
+}
+// ---------------------------------------------------------------------------
+// 构造器
+// ---------------------------------------------------------------------------
+function buildAnonymous(intent) {
+    const items = intent.items.map((item) => ({
+        sku: item.sku,
+        quantity: { value: rangeMidpoint(item.quantity_range), unit: item.unit },
+    }));
+    const quantity_range = intent.items.map((item) => ({
+        sku: item.sku,
+        min: item.quantity_range.min,
+        max: item.quantity_range.max,
+    }));
+    return {
+        tier: "anonymous",
+        rfq: { type: "rfq", items, requested_terms: { quantity_range } },
+    };
+}
+function buildDetailed(intent, allowed) {
+    const allowPurchaseQuantity = includes(allowed, "purchase_quantity");
+    const items = intent.items.map((item) => ({
+        sku: item.sku,
+        // 精确数量只在 purchase_quantity 允许时投影；否则退回区间中点（不泄精确量）。
+        quantity: {
+            value: allowPurchaseQuantity ? item.quantity : rangeMidpoint(item.quantity_range),
+            unit: item.unit,
+        },
+    }));
+    const requested = {};
+    if (!allowPurchaseQuantity) {
+        requested["quantity_range"] = intent.items.map((item) => ({
+            sku: item.sku,
+            min: item.quantity_range.min,
+            max: item.quantity_range.max,
+        }));
+    }
+    if (intent.delivery_before !== undefined) {
+        requested["delivery_before"] = intent.delivery_before;
+    }
+    for (const attr of OPTIONAL_DETAILED_ATTRIBUTES) {
+        if (!includes(allowed, attr))
+            continue;
+        const value = OPTIONAL_EXTRACTORS[attr](intent);
+        if (value !== undefined) {
+            requested[attr] = value;
+        }
+    }
+    const rfq = { type: "rfq", items };
+    if (Object.keys(requested).length > 0) {
+        rfq.requested_terms = requested;
+    }
+    return { tier: "detailed", rfq };
+}
+/**
+ * 按档位构造披露 payload。构造即排除（白名单投影，不读取私有 intent 字段）；
+ * 生成后立即过 NetworkDisclosurePolicy 校验，失败即抛（fail-closed）。
+ */
+export function buildDisclosedRfq(input) {
+    const payload = input.tier === "anonymous"
+        ? buildAnonymous(input.intent)
+        : buildDetailed(input.intent, input.allowed_attributes);
+    const check = validateNetworkDisclosure(payload, input.allowed_attributes);
+    if (!check.ok) {
+        throw new FanoutDisclosureError(check.errors);
+    }
+    // wire 结构保证：payload.rfq 必须是合法 KNP RFQ（fail-closed，§4.6）。
+    validateRfq(payload.rfq);
+    return payload;
+}
+//# sourceMappingURL=disclosure.js.map

package/dist/fanout/disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure.js","sourceRoot":"","sources":["../../src/fanout/disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAoBH,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AA2D/D,iDAAiD;AACjD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,MAAM,CAAW;IAC1B,YAAY,MAAgB;QAC1B,KAAK,CACH,yEAAyE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7F,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAmC;IACvE,cAAc;IACd,eAAe;IACf,qBAAqB;IACrB,uBAAuB;CACxB,CAAC;AAEF,6CAA6C;AAC7C,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;AAE/F;;;;GAIG;AACH,MAAM,mBAAmB,GAA0E;IACjG,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB;IACzD,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB;IACrD,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW;IACtD,0BAA0B;IAC1B,iBAAiB,EAAE,GAAG,EAAE,CAAC,SAAS;IAClC,qBAAqB,EAAE,GAAG,EAAE,CAAC,SAAS;IACtC,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS;IAC9B,mBAAmB,EAAE,GAAG,EAAE,CAAC,SAAS;IACpC,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS;CAC9B,CAAC;AAEF,MAAM,4BAA4B,GAAmC;IACnE,oBAAoB;IACpB,kBAAkB;IAClB,wBAAwB;CACzB,CAAC;AAEF,SAAS,QAAQ,CAAmB,IAAkB,EAAE,KAAQ;IAC9D,OAAQ,IAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,aAAa,CAAC,KAAmC;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA4B,EAC5B,OAAuC;IAEvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,sDAAsD,IAAI,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,2CAA2C,MAAM,GAAG,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;QAC1C,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAClD,IAAI,QAAQ,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,4BAA4B,EAAE,CAAC;YAChD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,4CAA4C,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,8DAA8D;QAC9D,MAAM,YAAY,GAAG,SAAS,CAAC,gBAAgB,CAAC,KAAK,SAAS,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E,SAAS,cAAc,CAAC,MAAiB;IACvC,MAAM,KAAK,GAAe,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KACzE,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAoB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClE,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;QAC5B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;KAC7B,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,cAAc,EAAE,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAAiB,EACjB,OAAuC;IAEvC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrE,MAAM,KAAK,GAAe,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,kDAAkD;QAClD,QAAQ,EAAE;YACR,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;YACjF,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,SAAS,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;YAC5B,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,SAAS,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,4BAA4B,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACnC,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC3D,MAAM,OAAO,GACX,KAAK,CAAC,IAAI,KAAK,WAAW;QACxB,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,yDAAyD;IACzD,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/fanout/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * fanout — WP2 RFQ Fan-out 隐私策略 + 多商家 RFQ 编排（基线 §30 / §29 / §4.4 / §16 / §19）。
+ *
+ * 子模块：
+ *   - policy.ts         FanoutPolicy 类型 + 确定性判定（max_recipients /
+ *                       minimum_trust / disclosure_profile /
+ *                       anonymous_first_round / category_sensitivity）；
+ *   - disclosure.ts     渐进披露构造器（anonymous / detailed 档，私有字段结构性排除）；
+ *   - orchestrator.ts   多商家并行 RFQ + 超时 Offer 收集 + 部分失败容忍 +
+ *                       比较集聚合（每腿独立 Ledger 链与幂等键）。
+ */
+export { DEFAULT_DISCLOSURE_PROFILE, DEFAULT_FANOUT_POLICY, DISCLOSURE_ATTRIBUTES, DISCLOSURE_TIERS, judgeFanout, matchingCategorySensitivity, stricterTrust, } from "./policy.js";
+export type { CategorySensitivity, DisclosureAttribute, DisclosureProfile, DisclosureTier, FanoutDecision, FanoutExcludeReason, FanoutExcluded, FanoutJudgeInput, FanoutPolicy, FanoutRecipient, FanoutTrustInput, FanoutTrustSignal, } from "./policy.js";
+export { ALWAYS_PRIVATE_ATTRIBUTES, FanoutDisclosureError, buildDisclosedRfq, rangeMidpoint, validateNetworkDisclosure, } from "./disclosure.js";
+export type { AnonymousRfqPayload, DetailedRfqPayload, DisclosedRfqPayload, DisclosureBuildInput, DisclosureValidationResult, QuantityRange, RfqIntent, RfqIntentItem, } from "./disclosure.js";
+export { DEFAULT_FANOUT_CAPABILITY, DEFAULT_FANOUT_TIMEOUT_MS, DEFAULT_POLL_INTERVAL_MS, FanoutOrchestrator, buildComparisonSet, compareRows, extractDelivery, extractKnpEnvelopeFromState, extractUnitPrice, } from "./orchestrator.js";
+export type { FanoutComparisonRow, FanoutLegResult, FanoutLegSpec, FanoutOrchestratorDeps, FanoutResult, LegOutcomeKind, } from "./orchestrator.js";

package/dist/fanout/index.js

@@ -0,0 +1,30 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * fanout — WP2 RFQ Fan-out 隐私策略 + 多商家 RFQ 编排（基线 §30 / §29 / §4.4 / §16 / §19）。
+ *
+ * 子模块：
+ *   - policy.ts         FanoutPolicy 类型 + 确定性判定（max_recipients /
+ *                       minimum_trust / disclosure_profile /
+ *                       anonymous_first_round / category_sensitivity）；
+ *   - disclosure.ts     渐进披露构造器（anonymous / detailed 档，私有字段结构性排除）；
+ *   - orchestrator.ts   多商家并行 RFQ + 超时 Offer 收集 + 部分失败容忍 +
+ *                       比较集聚合（每腿独立 Ledger 链与幂等键）。
+ */
+export { DEFAULT_DISCLOSURE_PROFILE, DEFAULT_FANOUT_POLICY, DISCLOSURE_ATTRIBUTES, DISCLOSURE_TIERS, judgeFanout, matchingCategorySensitivity, stricterTrust, } from "./policy.js";
+export { ALWAYS_PRIVATE_ATTRIBUTES, FanoutDisclosureError, buildDisclosedRfq, rangeMidpoint, validateNetworkDisclosure, } from "./disclosure.js";
+export { DEFAULT_FANOUT_CAPABILITY, DEFAULT_FANOUT_TIMEOUT_MS, DEFAULT_POLL_INTERVAL_MS, FanoutOrchestrator, buildComparisonSet, compareRows, extractDelivery, extractKnpEnvelopeFromState, extractUnitPrice, } from "./orchestrator.js";
+//# sourceMappingURL=index.js.map

package/dist/fanout/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fanout/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,WAAW,EACX,2BAA2B,EAC3B,aAAa,GACd,MAAM,aAAa,CAAC;AAgBrB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAYzB,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,2BAA2B,EAC3B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC"}

package/dist/fanout/orchestrator.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * fanout — 多商家 RFQ 编排器（基线 §16 / §19 / §30）。
+ *
+ * 向 N 个通道并行发 RFQ（每个商家独立 negotiation_id，双边语义不混淆）；
+ * 带超时的 Offer 收集；部分失败容忍（单个商家超时/拒绝不影响其他腿）；
+ * 结果聚合为比较集（price / delivery / terms 维度结构化）。每腿独立 Ledger
+ * 链（以 per-leg negotiation_id 为键）与幂等键（(sender_identity, message_id)，
+ * 每腿 message_id 独立生成）。
+ *
+ * §16 selected_nonbinding：Buyer 可以同时持有多个不同 Merchant 的 Agreement，
+ * 在本地选择其中一个 —— Merchant 无需知道 Buyer 是否选择了其他 Merchant。
+ * 因此编排器对每腿独立开 negotiation，绝不把跨商家的比较集写回任何一腿。
+ *
+ * Fail-closed（§4.6 / §4.5）：入站 envelope 在进入 Ledger 前必须过 schema 校验
+ * + digest 验签；任何一腿的通道/校验失败都以结构化 leg result 返回，不静默
+ * 吞掉，也不影响其他腿。
+ */
+import type { ChannelHandle, ChannelOpenInput, CounterpartyProfile, RemoteState } from "../counterparty/index.js";
+import type { NegotiationEnvelope } from "../negotiation/domain/envelope.js";
+import type { Offer } from "../negotiation/domain/objects.js";
+import type { TermSet } from "../negotiation/domain/common.js";
+import type { LedgerStore } from "../negotiation/ledger/index.js";
+import type { DisclosedRfqPayload } from "./disclosure.js";
+export declare const DEFAULT_FANOUT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_POLL_INTERVAL_MS = 100;
+export declare const DEFAULT_FANOUT_CAPABILITY = "knp.a2a.direct";
+/** 编排器依赖：唯一接缝是 ChannelHandle（§33），Ledger 每腿独立链。 */
+export interface FanoutOrchestratorDeps {
+    /** 本方身份（Ledger identity 的 sender 侧 / 幂等键一半）。 */
+    sender_identity: string;
+    /** 打开一条绑定到 negotiation 的通道（缺省用 profile 首选候选，失败不降级）。 */
+    openChannel: (profile: CounterpartyProfile, input: ChannelOpenInput) => Promise<ChannelHandle>;
+    /** 每腿独立 Ledger 链（以 negotiation_id 为键）；缺省不落账。 */
+    ledger?: LedgerStore;
+    /** envelope capability（缺省 knp.a2a.direct）。 */
+    capability?: string;
+    /** 从 RemoteState 提取远端最新 KNP envelope（缺省 direct 通道形状）。 */
+    extractEnvelope?: (state: RemoteState) => NegotiationEnvelope | null;
+    now?: () => string;
+    /** 时钟（超时测量；缺省 Date.now）。 */
+    clock?: () => number;
+    /** 轮询间隔 ms（缺省 100）。 */
+    pollIntervalMs?: number;
+}
+/** 单腿规格：同一 RFQ 意图的某档位 payload 发给一个商家。 */
+export interface FanoutLegSpec {
+    profile: CounterpartyProfile;
+    /** 每腿独立 negotiation_id；缺省由编排器生成（§16：双边语义不混淆）。 */
+    negotiation_id?: string;
+    /** 该腿披露档位 payload。 */
+    payload: DisclosedRfqPayload;
+    /** 请求超时 ms（缺省 DEFAULT_FANOUT_TIMEOUT_MS）。 */
+    timeoutMs?: number;
+}
+export type LegOutcomeKind = "offer_received" | "no_offer" | "declined" | "timed_out" | "failed";
+/** 单腿结果。部分失败容忍：失败腿以结构化 outcome 返回，不影响其他腿。 */
+export interface FanoutLegResult {
+    identity: string;
+    negotiation_id: string;
+    /** 该腿出站 message_id（幂等键 (sender_identity, message_id) 的另一半）。 */
+    message_id: string;
+    outcome: LegOutcomeKind;
+    /** offer_received 时的 Offer（wire 校验通过）。 */
+    offer?: Offer;
+    /** failed / timed_out 的结构化错误。 */
+    error?: {
+        code: string;
+        message: string;
+    };
+    /** 消息往返耗时 ms。 */
+    elapsed_ms: number;
+}
+/** 比较集行：price / delivery / terms 结构化维度（§19 比较 → 对 Top N counter）。 */
+export interface FanoutComparisonRow {
+    identity: string;
+    negotiation_id: string;
+    offer_id: string;
+    price: {
+        currency: string;
+        amount_minor: number;
+    } | null;
+    delivery_before?: string;
+    terms: Record<string, unknown>;
+    valid_until?: string;
+}
+export interface FanoutResult {
+    /** 按价格升序（同货币内）排列的 Offer 比较集。 */
+    offers: FanoutComparisonRow[];
+    /** 每条腿的结果（含失败腿）。 */
+    legs: FanoutLegResult[];
+    offer_count: number;
+    started_at: string;
+    completed_at: string;
+}
+/**
+ * 缺省入站提取器：从 A2A task.status.message 的 data part 取 `knp_envelope`
+ * （§24.3 约定）。hosted 通道的调用方注入自己的 extractEnvelope。
+ */
+export declare function extractKnpEnvelopeFromState(state: RemoteState): NegotiationEnvelope | null;
+/** 从 Offer terms 提取 unit price（items[0].unit_price 优先，其次 price_terms.unit_price）。 */
+export declare function extractUnitPrice(terms: TermSet): {
+    currency: string;
+    amount_minor: number;
+} | null;
+/** 从 Offer terms 提取交期维度。 */
+export declare function extractDelivery(terms: TermSet): {
+    delivery_before?: string;
+};
+/**
+ * 比较集排序（确定性）：
+ *   1. 有价格在前；2. 货币分组（不同货币不做数值比较，按货币码排序）；
+ *   3. 同货币价格升序；4. 交期早优先（ISO 字符串排序 = 时间排序）；
+ *   5. identity 升序 tie-break。
+ */
+export declare function compareRows(a: FanoutComparisonRow, b: FanoutComparisonRow): number;
+/** 把各腿结果聚合为比较集（price / delivery / terms 结构化；无 Offer 的腿不进入）。 */
+export declare function buildComparisonSet(legs: FanoutLegResult[]): FanoutComparisonRow[];
+export declare class FanoutOrchestrator {
+    private readonly deps;
+    constructor(deps: FanoutOrchestratorDeps);
+    private clock;
+    private now;
+    private capability;
+    private identitySnapshot;
+    private capabilitySnapshot;
+    /** 每腿独立落账；缺省 Ledger 为 no-op。append 失败向上抛（audit trail 损坏 = fail-closed）。 */
+    private appendLedger;
+    /**
+     * 向 N 个通道并行发 RFQ。Promise.allSettled 保证单腿崩溃不吞掉其他腿结果
+     * （部分失败容忍，§19）。每腿独立 negotiation_id / message_id。
+     */
+    fanout(legs: FanoutLegSpec[]): Promise<FanoutResult>;
+    private runLeg;
+    /** 带超时的 Offer 收集：轮询 getState 直到 deadline / 收到新 envelope / 终态。 */
+    private waitForOffer;
+    /** 把 wait 结果解析为 leg outcome，并落账该腿结果（fail-closed）。 */
+    private resolveWait;
+}