@peac/adapter-runtime-governance 0.12.9

package/dist/mappers/agt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agt.d.ts","sourceRoot":"","sources":["../../src/mappers/agt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAA2B,MAAM,aAAa,CAAC;AAEnF,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,wCAAwC;IACxC,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAWD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,sBAAsB,CA0BxE"}

package/dist/mappers/index.d.ts

@@ -0,0 +1,2 @@
+export { mapAgtEvent, type AgtEventInput } from './agt.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mappers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mappers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC"}

package/dist/normalize.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @peac/adapter-runtime-governance normalization and validation
+ *
+ * Fail-closed input validation for runtime governance payloads.
+ * Rejects malformed input with descriptive errors.
+ *
+ * These are adapter-level shape prechecks: string presence, max lengths,
+ * numeric bounds, RFC 3339 format, digest grammar (algorithm:hex), and
+ * URI scheme presence. Protocol-layer validation (@peac/protocol issue()
+ * and @peac/schema Wire02ClaimsSchema) remains authoritative for issuer
+ * canonicality, JOSE hardening, and wire-format compliance. Adapter
+ * validators catch obviously malformed input before it reaches the
+ * protocol layer.
+ *
+ * PEAC validates the structure of carried values, not upstream truth.
+ * Trust scores are structurally validated (finite, 0-1000 integer)
+ * but never derived, recomputed, ranked, or authoritatively assessed.
+ */
+import type { RuntimeGovernanceEvent } from './types.js';
+export declare class NormalizationError extends Error {
+    readonly field: string;
+    constructor(message: string, field: string);
+}
+/**
+ * Normalize and validate a raw runtime governance event input.
+ * Fail-closed: rejects malformed input with descriptive errors.
+ */
+export declare function normalizeRuntimeGovernanceEvent(input: unknown): RuntimeGovernanceEvent;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../src/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAIV,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,KAAK,EAAE,MAAM;gBAD7B,OAAO,EAAE,MAAM,EACC,KAAK,EAAE,MAAM;CAKhC;AAiPD;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAgCtF"}

package/dist/session-summary.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @peac/adapter-runtime-governance session summary builder
+ *
+ * Aggregates decoded receipts into a session summary.
+ * Decode-only (does NOT verify signatures; caller should verify first).
+ * Returns deterministic family order (sorted alphabetically).
+ * Counts unknown/unsupported type URIs separately.
+ * Never implies verification or finality.
+ */
+import { type SessionSummary } from './types.js';
+/**
+ * Build a session summary from an array of signed JWS receipts.
+ *
+ * Decodes each JWS (does NOT verify signatures; caller should verify first).
+ * Extracts session ID, families, and issuer from claims and extensions.
+ * Unknown type URIs are counted but not included in the families list.
+ *
+ * @param receipts - Array of compact JWS strings (must be valid JWS format)
+ * @returns Session summary with deterministic family ordering
+ */
+export declare function buildSessionSummary(receipts: string[]): SessionSummary;
+//# sourceMappingURL=session-summary.d.ts.map

package/dist/session-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-summary.d.ts","sourceRoot":"","sources":["../src/session-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAKpB;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,cAAc,CA+CtE"}

package/dist/types.d.ts

@@ -0,0 +1,136 @@
+/**
+ * @peac/adapter-runtime-governance types
+ *
+ * Discriminated union payload model with per-family typing.
+ * No weak Record<string, unknown> blobs.
+ */
+/**
+ * Runtime governance record families.
+ * String-literal union (not enum) for lighter output and tree-shaking.
+ */
+export declare const RUNTIME_GOVERNANCE_FAMILIES: readonly ["policy_decision", "audit_entry", "authority_scope", "lifecycle_event", "trust_observation", "compliance_observation"];
+export type RuntimeGovernanceFamily = (typeof RUNTIME_GOVERNANCE_FAMILIES)[number];
+/**
+ * Preserved upstream artifact context.
+ * All optional, all observational. Bounded fields, no arbitrary passthrough.
+ */
+export interface PreservedUpstreamArtifact {
+    /** Upstream system identifier (max 256 chars). */
+    source_system?: string;
+    /** Upstream event type identifier (max 256 chars). */
+    source_event_type?: string;
+    /** Upstream event identifier for deduplication (max 256 chars). */
+    source_event_id?: string;
+    /** Upstream event timestamp (RFC 3339, max 64 chars). */
+    source_timestamp?: string;
+    /** Hash of upstream artifact (max 512 chars). */
+    source_artifact_hash?: string;
+    /** URI or reference to upstream artifact (max 2048 chars). */
+    source_artifact_ref?: string;
+    /** CloudEvents type URI for cross-system correlation (max 256 chars). */
+    source_cloud_event_type?: string;
+}
+/** Policy decision payload. */
+export interface PolicyDecisionPayload {
+    family: 'policy_decision';
+    action: string;
+    matched_rule?: string;
+    policy_name?: string;
+    reason?: string;
+    evaluation_ms?: number;
+}
+/** Audit entry payload. */
+export interface AuditEntryPayload {
+    family: 'audit_entry';
+    entry_id?: string;
+    event_type?: string;
+    outcome?: string;
+    previous_hash?: string;
+    entry_hash?: string;
+    trace_id?: string;
+}
+/** Authority scope payload. */
+export interface AuthorityScopePayload {
+    family: 'authority_scope';
+    decision?: string;
+    effective_scope?: string[];
+    trust_tier?: string;
+    matched_invariants?: string[];
+}
+/** Lifecycle event payload. */
+export interface LifecycleEventPayload {
+    family: 'lifecycle_event';
+    lifecycle_event_type?: string;
+    previous_state?: string;
+    new_state?: string;
+    actor?: string;
+}
+/** Trust observation payload. */
+export interface TrustObservationPayload {
+    family: 'trust_observation';
+    peer_id?: string;
+    action?: string;
+    success?: boolean;
+    trust_delta?: number;
+    trust_score?: number;
+}
+/** Compliance observation payload. */
+export interface ComplianceObservationPayload {
+    family: 'compliance_observation';
+    framework?: string;
+    compliance_score?: number;
+    violation_count?: number;
+    evidence_item_count?: number;
+}
+/** Discriminated union of all family payloads. */
+export type RuntimeGovernancePayload = PolicyDecisionPayload | AuditEntryPayload | AuthorityScopePayload | LifecycleEventPayload | TrustObservationPayload | ComplianceObservationPayload;
+/**
+ * Normalized runtime governance event.
+ * Generic input to issueRuntimeGovernanceRecord().
+ */
+export interface RuntimeGovernanceEvent {
+    /** Specific event name (e.g., 'policy.evaluated'). */
+    event_name: string;
+    /** Typed, validated payload (discriminated by family). */
+    payload: RuntimeGovernancePayload;
+    /** Optional preserved upstream artifact context. */
+    upstream?: PreservedUpstreamArtifact;
+}
+/** Options for issuing a runtime governance record. */
+export interface IssueOptions {
+    /** Ed25519 private key (32 bytes). Caller-provided; never stored. */
+    privateKey: Uint8Array;
+    /** Key ID (max 256 chars). */
+    kid: string;
+    /** Canonical issuer URL (HTTPS or DID). */
+    issuer: string;
+    /** Session identifier for event correlation. */
+    sessionId: string;
+    /** Agent identifier. */
+    agentId: string;
+    /** Provider name. Caller-supplied; never hardcoded. */
+    provider: string;
+}
+/** Result of issuing a runtime governance record. */
+export interface IssueResult {
+    /** Compact JWS (signed Interaction Record). */
+    jws: string;
+    /** PEAC event type URI used. */
+    type: string;
+    /** Record family. */
+    family: RuntimeGovernanceFamily;
+}
+/** Session summary aggregated from decoded receipts. */
+export interface SessionSummary {
+    /** Session identifier. */
+    sessionId: string;
+    /** Total receipts in the session. */
+    receipts: number;
+    /** Distinct families represented (sorted alphabetically). */
+    families: RuntimeGovernanceFamily[];
+    /** Count of receipts with unrecognized type URIs. */
+    unknownTypeCount: number;
+    /** Issuer (from the first receipt, or empty if no receipts). */
+    issuer: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,kIAO9B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,2BAA2B;AAC3B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,iCAAiC;AACjC,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,sCAAsC;AACtC,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,wBAAwB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,kDAAkD;AAClD,MAAM,MAAM,wBAAwB,GAChC,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,uBAAuB,GACvB,4BAA4B,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,OAAO,EAAE,wBAAwB,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,UAAU,EAAE,UAAU,CAAC;IACvB,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,MAAM,EAAE,uBAAuB,CAAC;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@peac/adapter-runtime-governance",
+  "version": "0.12.9",
+  "description": "Runtime governance adapter for PEAC interaction records with AGT mapper",
+  "main": "dist/index.cjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/peacprotocol/peac.git",
+    "directory": "packages/adapters/runtime-governance"
+  },
+  "author": "PEAC Protocol Contributors",
+  "license": "Apache-2.0",
+  "homepage": "https://peacprotocol.org",
+  "bugs": {
+    "url": "https://github.com/peacprotocol/peac/issues"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "@peac/protocol": "0.12.9",
+    "@peac/crypto": "0.12.9"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.3.3",
+    "vitest": "^4.0.0"
+  },
+  "keywords": [
+    "peac",
+    "peacprotocol",
+    "interaction-records",
+    "signed-records",
+    "runtime-governance",
+    "agent-records",
+    "agent-governance",
+    "mcp",
+    "a2a"
+  ],
+  "scripts": {
+    "prebuild": "rm -rf dist",
+    "build": "pnpm run build:js && pnpm run build:types",
+    "build:js": "tsup",
+    "build:types": "rm -f dist/.tsbuildinfo && tsc && rm -f dist/.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}