@phosphorco/bb-identity 0.1.0

package/dist/index-runtime.js

@@ -0,0 +1,201 @@
+// @bun
+// model-runtime.ts
+var ID_MAX_LENGTH = 256;
+var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
+function failure(code, message, retry = "never") {
+  return { code, message, retry };
+}
+function ok(value) {
+  return { ok: true, value };
+}
+function err(code, message, retry = "never") {
+  return { ok: false, error: failure(code, message, retry) };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isBoundedString(value, maximum = ID_MAX_LENGTH) {
+  return typeof value === "string" && value.length > 0 && value.length <= maximum;
+}
+function idCodec(kind) {
+  return {
+    decode(input) {
+      const valid = kind === "server-session" ? isBoundedString(input, 4096) && !/[\u0000-\u0020\u007f]/.test(input) : isBoundedString(input) && ID_PATTERN.test(input);
+      if (!valid) {
+        return err("invalid-input", `Invalid ${kind} identifier.`);
+      }
+      return ok(input);
+    },
+    encode(value) {
+      return value;
+    }
+  };
+}
+var identityKeyCodec = {
+  decode(input) {
+    if (!isBoundedString(input, 512) || /[\u0000-\u001f\u007f]/.test(input)) {
+      return err("invalid-input", "Invalid identity key.");
+    }
+    return ok(input);
+  },
+  encode(value) {
+    return value;
+  }
+};
+function decodePresentation(value) {
+  return isRecord(value) && isBoundedString(value.displayName, 512) && (value.handle === null || isBoundedString(value.handle, 512)) && (value.avatarUrl === null || isBoundedString(value.avatarUrl, 2048));
+}
+function decodeIdentity(value) {
+  if (!isRecord(value) || !identityKeyCodec.decode(value.key).ok)
+    return false;
+  if (value.kind === "person")
+    return isBoundedString(value.issuer, 512) && isBoundedString(value.subject, 512);
+  if (value.kind === "default-user")
+    return isBoundedString(value.instanceId);
+  if (value.kind === "machine") {
+    return isBoundedString(value.instanceId) && (value.hostId === null || isBoundedString(value.hostId, 512));
+  }
+  return value.kind === "external" && isBoundedString(value.pluginId) && isBoundedString(value.subject, 512);
+}
+var profileCodec = {
+  decode(input) {
+    if (!isRecord(input) || !decodeIdentity(input.identity) || !decodePresentation(input.presentation) || !isBoundedString(input.revision) || input.status !== "current" && input.status !== "historical") {
+      return err("invalid-input", "Invalid identity profile.");
+    }
+    return ok(input);
+  },
+  encode(value) {
+    return value;
+  }
+};
+function isContributionReference(value) {
+  return isRecord(value) && idCodec("thread").decode(value.threadId).ok && idCodec("contribution").decode(value.contributionId).ok;
+}
+function isPersonReference(value) {
+  return isRecord(value) && (value.kind === "person" || value.kind === "default-user") && decodeIdentity(value);
+}
+function isMachineReference(value) {
+  return isRecord(value) && value.kind === "machine" && decodeIdentity(value);
+}
+function isActorSnapshot(value) {
+  if (!isRecord(value) || !decodeIdentity(value.identity) || !decodePresentation(value.presentation))
+    return false;
+  const evidence = value.evidence;
+  if (evidence !== "provider-verified" && evidence !== "local-user" && evidence !== "upstream-default" && evidence !== "integration-asserted" && evidence !== "legacy" && evidence !== "machine")
+    return false;
+  return isMachineReference(value.identity) ? evidence === "machine" : evidence !== "machine";
+}
+function isOrigin(value) {
+  if (!isRecord(value))
+    return false;
+  if (value.kind === "person") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isPersonReference(actor.identity);
+  }
+  if (value.kind === "machine") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isMachineReference(actor.identity) && isRecord(actor) && actor.evidence === "machine";
+  }
+  if (value.kind === "external") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isRecord(actor.identity) && actor.identity.kind === "external" && actor.evidence !== "machine";
+  }
+  if (value.kind === "agent")
+    return value.agentId === null || isBoundedString(value.agentId);
+  if (value.kind === "system")
+    return isBoundedString(value.reason, 1024);
+  return value.kind === "unknown" && (value.reason === "legacy" || value.reason === "upstream-unattributed" || value.reason === "missing-source");
+}
+function isContribution(value) {
+  return isRecord(value) && isContributionReference(value.reference) && isOrigin(value.author) && (value.latestEditor === null || isActorSnapshot(value.latestEditor)) && isBoundedString(value.acceptedAt, 256) && Array.isArray(value.mentionedPeople) && value.mentionedPeople.every(isPersonReference);
+}
+function isCorrelation(value) {
+  return isRecord(value) && idCodec("thread").decode(value.threadId).ok && isBoundedString(value.turnId) && isBoundedString(value.attemptId) && (value.toolCallId === null || isBoundedString(value.toolCallId));
+}
+function referenceKey(value) {
+  return `${value.threadId}\x00${value.contributionId}`;
+}
+function isInputSource(value) {
+  if (!isRecord(value))
+    return false;
+  if (value.kind === "contribution")
+    return isContributionReference(value.reference);
+  if (value.kind === "interaction")
+    return isBoundedString(value.interactionId) && isOrigin(value.resolver);
+  return value.kind === "generated" && (value.purpose === "continuation" || value.purpose === "resolved-resource" || value.purpose === "system-context") && Array.isArray(value.basedOn) && value.basedOn.every(isContributionReference);
+}
+function causalReferences(groups) {
+  const references = [];
+  for (const group of groups) {
+    if (!isRecord(group) || !Array.isArray(group.sources) || !group.sources.every(isInputSource))
+      return null;
+    for (const source of group.sources) {
+      if (!isRecord(source))
+        return null;
+      if (source.kind === "contribution" && isContributionReference(source.reference))
+        references.push(source.reference);
+      if (source.kind === "generated" && Array.isArray(source.basedOn) && source.basedOn.every(isContributionReference))
+        references.push(...source.basedOn);
+    }
+  }
+  return references;
+}
+function hasCompleteCausality(groups, contributions, missing) {
+  const references = causalReferences(groups);
+  if (references === null || !contributions.every(isContribution) || !missing.every(isContributionReference))
+    return false;
+  const required = new Set(references.map(referenceKey));
+  const found = new Set;
+  for (const contribution of contributions) {
+    if (!isRecord(contribution) || !isContributionReference(contribution.reference))
+      return false;
+    const key = referenceKey(contribution.reference);
+    if (found.has(key))
+      return false;
+    found.add(key);
+  }
+  const absent = new Set;
+  for (const reference of missing) {
+    const key = referenceKey(reference);
+    if (absent.has(key) || found.has(key))
+      return false;
+    absent.add(key);
+  }
+  return required.size === found.size + absent.size && [...required].every((key) => found.has(key) || absent.has(key));
+}
+var provenanceCodec = {
+  decode(input) {
+    if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
+      return err("invalid-input", "Invalid execution provenance.");
+    }
+    if (input.status === "unknown")
+      return (input.correlation === null || isCorrelation(input.correlation)) && isBoundedString(input.reason, 1024) ? ok(input) : err("invalid-input", "Unknown provenance needs a valid correlation and reason.");
+    if (!Array.isArray(input.inputGroups) || !Array.isArray(input.contributions))
+      return err("invalid-input", "Provenance needs input groups and contributions.");
+    if (input.status === "known") {
+      return isCorrelation(input.correlation) && hasCompleteCausality(input.inputGroups, input.contributions, []) ? ok(input) : err("invalid-input", "Known provenance needs complete correlated evidence.");
+    }
+    if ((input.correlation === null || isCorrelation(input.correlation)) && Array.isArray(input.missing) && isBoundedString(input.reason, 1024) && hasCompleteCausality(input.inputGroups, input.contributions, input.missing)) {
+      return ok(input);
+    }
+    return err("invalid-input", "Partial provenance needs complete causal accounting.");
+  },
+  encode(value) {
+    return value;
+  }
+};
+function defaultIdentityKey(instance) {
+  return `local:${instance}`;
+}
+function newOperationId() {
+  const random = globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+  return `op-${random}`;
+}
+export {
+  provenanceCodec,
+  profileCodec,
+  newOperationId,
+  identityKeyCodec,
+  idCodec,
+  defaultIdentityKey
+};

package/dist/model-runtime.js

@@ -0,0 +1,207 @@
+// @bun
+// model-runtime.ts
+var ID_MAX_LENGTH = 256;
+var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
+function failure(code, message, retry = "never") {
+  return { code, message, retry };
+}
+function ok(value) {
+  return { ok: true, value };
+}
+function err(code, message, retry = "never") {
+  return { ok: false, error: failure(code, message, retry) };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isBoundedString(value, maximum = ID_MAX_LENGTH) {
+  return typeof value === "string" && value.length > 0 && value.length <= maximum;
+}
+function idCodec(kind) {
+  return {
+    decode(input) {
+      const valid = kind === "server-session" ? isBoundedString(input, 4096) && !/[\u0000-\u0020\u007f]/.test(input) : isBoundedString(input) && ID_PATTERN.test(input);
+      if (!valid) {
+        return err("invalid-input", `Invalid ${kind} identifier.`);
+      }
+      return ok(input);
+    },
+    encode(value) {
+      return value;
+    }
+  };
+}
+var identityKeyCodec = {
+  decode(input) {
+    if (!isBoundedString(input, 512) || /[\u0000-\u001f\u007f]/.test(input)) {
+      return err("invalid-input", "Invalid identity key.");
+    }
+    return ok(input);
+  },
+  encode(value) {
+    return value;
+  }
+};
+function decodePresentation(value) {
+  return isRecord(value) && isBoundedString(value.displayName, 512) && (value.handle === null || isBoundedString(value.handle, 512)) && (value.avatarUrl === null || isBoundedString(value.avatarUrl, 2048));
+}
+function decodeIdentity(value) {
+  if (!isRecord(value) || !identityKeyCodec.decode(value.key).ok)
+    return false;
+  if (value.kind === "person")
+    return isBoundedString(value.issuer, 512) && isBoundedString(value.subject, 512);
+  if (value.kind === "default-user")
+    return isBoundedString(value.instanceId);
+  if (value.kind === "machine") {
+    return isBoundedString(value.instanceId) && (value.hostId === null || isBoundedString(value.hostId, 512));
+  }
+  return value.kind === "external" && isBoundedString(value.pluginId) && isBoundedString(value.subject, 512);
+}
+var profileCodec = {
+  decode(input) {
+    if (!isRecord(input) || !decodeIdentity(input.identity) || !decodePresentation(input.presentation) || !isBoundedString(input.revision) || input.status !== "current" && input.status !== "historical") {
+      return err("invalid-input", "Invalid identity profile.");
+    }
+    return ok(input);
+  },
+  encode(value) {
+    return value;
+  }
+};
+function isContributionReference(value) {
+  return isRecord(value) && idCodec("thread").decode(value.threadId).ok && idCodec("contribution").decode(value.contributionId).ok;
+}
+function isPersonReference(value) {
+  return isRecord(value) && (value.kind === "person" || value.kind === "default-user") && decodeIdentity(value);
+}
+function isMachineReference(value) {
+  return isRecord(value) && value.kind === "machine" && decodeIdentity(value);
+}
+function isActorSnapshot(value) {
+  if (!isRecord(value) || !decodeIdentity(value.identity) || !decodePresentation(value.presentation))
+    return false;
+  const evidence = value.evidence;
+  if (evidence !== "provider-verified" && evidence !== "local-user" && evidence !== "upstream-default" && evidence !== "integration-asserted" && evidence !== "legacy" && evidence !== "machine")
+    return false;
+  return isMachineReference(value.identity) ? evidence === "machine" : evidence !== "machine";
+}
+function isOrigin(value) {
+  if (!isRecord(value))
+    return false;
+  if (value.kind === "person") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isPersonReference(actor.identity);
+  }
+  if (value.kind === "machine") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isMachineReference(actor.identity) && isRecord(actor) && actor.evidence === "machine";
+  }
+  if (value.kind === "external") {
+    const actor = value.actor;
+    return isActorSnapshot(actor) && isRecord(actor) && isRecord(actor.identity) && actor.identity.kind === "external" && actor.evidence !== "machine";
+  }
+  if (value.kind === "agent")
+    return value.agentId === null || isBoundedString(value.agentId);
+  if (value.kind === "system")
+    return isBoundedString(value.reason, 1024);
+  return value.kind === "unknown" && (value.reason === "legacy" || value.reason === "upstream-unattributed" || value.reason === "missing-source");
+}
+function isContribution(value) {
+  return isRecord(value) && isContributionReference(value.reference) && isOrigin(value.author) && (value.latestEditor === null || isActorSnapshot(value.latestEditor)) && isBoundedString(value.acceptedAt, 256) && Array.isArray(value.mentionedPeople) && value.mentionedPeople.every(isPersonReference);
+}
+function isCorrelation(value) {
+  return isRecord(value) && idCodec("thread").decode(value.threadId).ok && isBoundedString(value.turnId) && isBoundedString(value.attemptId) && (value.toolCallId === null || isBoundedString(value.toolCallId));
+}
+function referenceKey(value) {
+  return `${value.threadId}\x00${value.contributionId}`;
+}
+function isInputSource(value) {
+  if (!isRecord(value))
+    return false;
+  if (value.kind === "contribution")
+    return isContributionReference(value.reference);
+  if (value.kind === "interaction")
+    return isBoundedString(value.interactionId) && isOrigin(value.resolver);
+  return value.kind === "generated" && (value.purpose === "continuation" || value.purpose === "resolved-resource" || value.purpose === "system-context") && Array.isArray(value.basedOn) && value.basedOn.every(isContributionReference);
+}
+function causalReferences(groups) {
+  const references = [];
+  for (const group of groups) {
+    if (!isRecord(group) || !Array.isArray(group.sources) || !group.sources.every(isInputSource))
+      return null;
+    for (const source of group.sources) {
+      if (!isRecord(source))
+        return null;
+      if (source.kind === "contribution" && isContributionReference(source.reference))
+        references.push(source.reference);
+      if (source.kind === "generated" && Array.isArray(source.basedOn) && source.basedOn.every(isContributionReference))
+        references.push(...source.basedOn);
+    }
+  }
+  return references;
+}
+function hasCompleteCausality(groups, contributions, missing) {
+  const references = causalReferences(groups);
+  if (references === null || !contributions.every(isContribution) || !missing.every(isContributionReference))
+    return false;
+  const required = new Set(references.map(referenceKey));
+  const found = new Set;
+  for (const contribution of contributions) {
+    if (!isRecord(contribution) || !isContributionReference(contribution.reference))
+      return false;
+    const key = referenceKey(contribution.reference);
+    if (found.has(key))
+      return false;
+    found.add(key);
+  }
+  const absent = new Set;
+  for (const reference of missing) {
+    const key = referenceKey(reference);
+    if (absent.has(key) || found.has(key))
+      return false;
+    absent.add(key);
+  }
+  return required.size === found.size + absent.size && [...required].every((key) => found.has(key) || absent.has(key));
+}
+var provenanceCodec = {
+  decode(input) {
+    if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
+      return err("invalid-input", "Invalid execution provenance.");
+    }
+    if (input.status === "unknown")
+      return (input.correlation === null || isCorrelation(input.correlation)) && isBoundedString(input.reason, 1024) ? ok(input) : err("invalid-input", "Unknown provenance needs a valid correlation and reason.");
+    if (!Array.isArray(input.inputGroups) || !Array.isArray(input.contributions))
+      return err("invalid-input", "Provenance needs input groups and contributions.");
+    if (input.status === "known") {
+      return isCorrelation(input.correlation) && hasCompleteCausality(input.inputGroups, input.contributions, []) ? ok(input) : err("invalid-input", "Known provenance needs complete correlated evidence.");
+    }
+    if ((input.correlation === null || isCorrelation(input.correlation)) && Array.isArray(input.missing) && isBoundedString(input.reason, 1024) && hasCompleteCausality(input.inputGroups, input.contributions, input.missing)) {
+      return ok(input);
+    }
+    return err("invalid-input", "Partial provenance needs complete causal accounting.");
+  },
+  encode(value) {
+    return value;
+  }
+};
+function defaultIdentityKey(instance) {
+  return `local:${instance}`;
+}
+function newOperationId() {
+  const random = globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+  return `op-${random}`;
+}
+function newConflictToken() {
+  return `conflict-${globalThis.crypto?.randomUUID?.() ?? Date.now().toString(36)}`;
+}
+export {
+  provenanceCodec,
+  profileCodec,
+  ok,
+  newOperationId,
+  newConflictToken,
+  identityKeyCodec,
+  idCodec,
+  err,
+  defaultIdentityKey
+};