@psavelis/enterprise-blockchain 0.1.0 → 1.1.0

package/dist/protocols/credentialing-port.d.ts

@@ -0,0 +1,11 @@
+import type { StaffingAssignment } from "../credentialing/domain/entities.js";
+/**
+ * Port for projecting credentialing decisions onto a distributed ledger.
+ */
+export interface CredentialingProtocolAdapter<TInvocation> {
+    buildAssignmentClearanceFlow(assignment: StaffingAssignment, decision: {
+        approved: boolean;
+        reasons: string[];
+    }): TInvocation;
+}
+//# sourceMappingURL=credentialing-port.d.ts.map

package/dist/protocols/credentialing-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialing-port.d.ts","sourceRoot":"","sources":["../../src/protocols/credentialing-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,4BAA4B,CAAC,WAAW;IACvD,4BAA4B,CAC1B,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GACjD,WAAW,CAAC;CAChB"}

package/dist/protocols/credentialing-port.js

@@ -0,0 +1 @@
+export {};

package/dist/protocols/fabric-port.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Protocol-level port for Hyperledger Fabric capabilities.
+ *
+ * This defines what operations are available at the protocol level,
+ * independent of specific domain use cases (traceability, privacy, etc.).
+ *
+ * @see skills/platform-selection.md for protocol selection criteria
+ */
+export interface FabricInvocationResult {
+    transactionId: string;
+    payload: Uint8Array;
+    validationCode: number;
+}
+export interface FabricEndorsementPolicy {
+    identities: Array<{
+        role: string;
+        mspId: string;
+    }>;
+    policy: string;
+}
+/**
+ * Port for Fabric chaincode invocation (submit transactions).
+ *
+ * Implementations handle endorsement collection and commit.
+ */
+export interface IFabricSubmitPort {
+    /**
+     * Submit a transaction to the ledger.
+     * @param chaincodeId Chaincode name
+     * @param functionName Function to invoke
+     * @param args Function arguments
+     * @param transientData Private data (not committed to ledger)
+     * @returns Transaction result with validation code
+     */
+    submitTransaction(chaincodeId: string, functionName: string, args: string[], transientData?: Record<string, Uint8Array>): Promise<FabricInvocationResult>;
+}
+/**
+ * Port for Fabric chaincode queries (read-only operations).
+ */
+export interface IFabricQueryPort {
+    /**
+     * Evaluate a chaincode function without committing.
+     * @param chaincodeId Chaincode name
+     * @param functionName Function to evaluate
+     * @param args Function arguments
+     * @returns Query result payload
+     */
+    evaluateTransaction(chaincodeId: string, functionName: string, args: string[]): Promise<Uint8Array>;
+}
+/**
+ * Port for Fabric private data collection operations.
+ */
+export interface IFabricPrivateDataPort {
+    /**
+     * Store data in a private data collection.
+     * @param collectionName Name of the collection
+     * @param key Document key
+     * @param value Document value
+     */
+    putPrivateData(collectionName: string, key: string, value: Uint8Array): Promise<void>;
+    /**
+     * Retrieve data from a private data collection.
+     * @param collectionName Name of the collection
+     * @param key Document key
+     * @returns Document value or undefined if not found
+     */
+    getPrivateData(collectionName: string, key: string): Promise<Uint8Array | undefined>;
+}
+/**
+ * Port for Fabric event subscription.
+ */
+export interface IFabricEventPort {
+    /**
+     * Subscribe to chaincode events.
+     * @param chaincodeId Chaincode name
+     * @param eventName Event name filter
+     * @param callback Event handler
+     * @returns Unsubscribe function
+     */
+    subscribeToEvents(chaincodeId: string, eventName: string, callback: (event: FabricChaincodeEvent) => void): () => void;
+}
+export interface FabricChaincodeEvent {
+    chaincodeId: string;
+    eventName: string;
+    payload: Uint8Array;
+    transactionId: string;
+    blockNumber: bigint;
+}
+//# sourceMappingURL=fabric-port.d.ts.map

package/dist/protocols/fabric-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fabric-port.d.ts","sourceRoot":"","sources":["../../src/protocols/fabric-port.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,UAAU,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;;OAOG;IACH,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EAAE,EACd,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GACzC,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,mBAAmB,CACjB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;;OAKG;IACH,cAAc,CACZ,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;OAKG;IACH,cAAc,CACZ,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAC9C,MAAM,IAAI,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,UAAU,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/protocols/fabric-port.js

@@ -0,0 +1,9 @@
+/**
+ * Protocol-level port for Hyperledger Fabric capabilities.
+ *
+ * This defines what operations are available at the protocol level,
+ * independent of specific domain use cases (traceability, privacy, etc.).
+ *
+ * @see skills/platform-selection.md for protocol selection criteria
+ */
+export {};

package/dist/protocols/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Protocol adapter interfaces for enterprise blockchain platforms.
+ *
+ * These ports define the contract between domain logic and
+ * platform-specific implementations (Fabric, Besu, Corda).
+ */
+export type { TraceabilityProtocolAdapter } from "./traceability-port.js";
+export type { PrivacyProtocolAdapter } from "./privacy-port.js";
+export type { CredentialingProtocolAdapter } from "./credentialing-port.js";
+export type { FabricInvocationResult, FabricEndorsementPolicy, IFabricSubmitPort, IFabricQueryPort, IFabricPrivateDataPort, IFabricEventPort, FabricChaincodeEvent, } from "./fabric-port.js";
+export type { BesuTransactionResult, BesuGasEstimate, IBesuTransactionPort, IBesuQueryPort, IBesuPrivacyPort, } from "./besu-port.js";
+export type { CordaFlowResult, CordaTransactionInfo, ICordaFlowPort, ICordaVaultPort, CordaQueryCriteria, CordaVaultState, ICordaIdentityPort, CordaPartyInfo, } from "./corda-port.js";
+export type { P2MRCreateResult, P2MRSpendResult, P2MROutputStatus, IP2MRCreatePort, IP2MRSpendPort, IP2MRQueryPort, IP2MRProtocolAdapter, P2MRProtocolConfig, } from "./p2mr-port.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/protocols/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocols/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAG1E,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGhE,YAAY,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAG5E,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC"}

package/dist/protocols/index.js

@@ -0,0 +1,7 @@
+/**
+ * Protocol adapter interfaces for enterprise blockchain platforms.
+ *
+ * These ports define the contract between domain logic and
+ * platform-specific implementations (Fabric, Besu, Corda).
+ */
+export {};

package/dist/protocols/p2mr-port.d.ts

@@ -0,0 +1,159 @@
+/**
+ * P2MR (Pay-to-Merkle-Root) Protocol Port
+ *
+ * Defines the interface for P2MR operations across different blockchain protocols.
+ * Implementations provide protocol-specific handling while the domain layer
+ * remains protocol-agnostic.
+ *
+ * P2MR is BIP-360-inspired: outputs store only a Merkle root of spending conditions,
+ * keeping public keys private until spend time. This eliminates the quantum
+ * "harvest now, decrypt later" threat.
+ */
+import type { P2MROutput, SpendProof } from "../p2mr/types.js";
+/**
+ * Result of creating a P2MR output on-chain.
+ */
+export interface P2MRCreateResult {
+    /** Output ID assigned by the protocol. */
+    outputId: string;
+    /** Transaction/block identifier. */
+    txRef: string;
+    /** Block number or ledger height. */
+    blockHeight: number;
+    /** Protocol-specific metadata. */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Result of spending a P2MR output.
+ */
+export interface P2MRSpendResult {
+    /** Output ID that was spent. */
+    outputId: string;
+    /** Transaction/block identifier. */
+    txRef: string;
+    /** Block number or ledger height. */
+    blockHeight: number;
+    /** Recipient address/identity. */
+    recipient: string;
+    /** Value transferred. */
+    value: bigint;
+}
+/**
+ * Query result for an output.
+ */
+export interface P2MROutputStatus {
+    /** Whether the output exists. */
+    exists: boolean;
+    /** Whether the output is unspent. */
+    unspent: boolean;
+    /** The output data (if exists). */
+    output?: P2MROutput;
+    /** Block height when created. */
+    createdAtBlock?: number;
+    /** Block height when spent (if spent). */
+    spentAtBlock?: number;
+}
+/**
+ * Port for creating P2MR outputs.
+ *
+ * Implementations handle protocol-specific transaction submission and
+ * output registration.
+ */
+export interface IP2MRCreatePort {
+    /**
+     * Create a new P2MR output by committing to a Merkle root.
+     *
+     * @param merkleRoot - SHA-256 Merkle root of the script tree.
+     * @param value - Value to lock in the output.
+     * @param metadataHash - Optional hash of off-chain metadata.
+     * @returns Creation result with output ID and transaction reference.
+     */
+    createOutput(merkleRoot: string, value: bigint, metadataHash?: string): Promise<P2MRCreateResult>;
+    /**
+     * Create an output with a specific ID (for deterministic outputs).
+     *
+     * @param outputId - Desired output ID.
+     * @param merkleRoot - SHA-256 Merkle root of the script tree.
+     * @param value - Value to lock in the output.
+     * @param metadataHash - Optional hash of off-chain metadata.
+     */
+    createOutputWithId(outputId: string, merkleRoot: string, value: bigint, metadataHash?: string): Promise<P2MRCreateResult>;
+}
+/**
+ * Port for spending P2MR outputs.
+ *
+ * Implementations handle spend proof validation and value transfer.
+ */
+export interface IP2MRSpendPort {
+    /**
+     * Spend a P2MR output using a spend proof.
+     *
+     * The proof includes:
+     * - The revealed script leaf (spending condition)
+     * - Merkle proof from leaf to root
+     * - Witness data (public keys, signatures)
+     *
+     * Off-chain: ML-DSA-65 signature verification
+     * On-chain: Merkle proof verification, value transfer
+     *
+     * @param proof - Complete spend proof.
+     * @param recipient - Recipient address/identity.
+     * @returns Spend result with transaction reference.
+     */
+    spend(proof: SpendProof, recipient: string): Promise<P2MRSpendResult>;
+}
+/**
+ * Port for querying P2MR outputs.
+ */
+export interface IP2MRQueryPort {
+    /**
+     * Get the status of an output.
+     *
+     * @param outputId - Output ID to query.
+     * @returns Output status including spent/unspent.
+     */
+    getOutputStatus(outputId: string): Promise<P2MROutputStatus>;
+    /**
+     * Verify a Merkle proof off-chain (without submitting transaction).
+     *
+     * @param leafHash - SHA-256 hash of the script leaf.
+     * @param merkleRoot - Expected Merkle root.
+     * @param proof - Array of sibling hashes with positions.
+     * @returns True if the proof is valid.
+     */
+    verifyMerkleProof(leafHash: string, merkleRoot: string, proof: Array<{
+        hash: string;
+        position: "left" | "right";
+    }>): Promise<boolean>;
+}
+/**
+ * Combined port for full P2MR operations.
+ */
+export interface IP2MRProtocolAdapter extends IP2MRCreatePort, IP2MRSpendPort, IP2MRQueryPort {
+    /**
+     * Protocol identifier.
+     */
+    readonly protocol: "besu" | "fabric" | "corda";
+    /**
+     * Protocol-specific configuration.
+     */
+    readonly config: P2MRProtocolConfig;
+}
+/**
+ * Configuration for P2MR protocol adapter.
+ */
+export interface P2MRProtocolConfig {
+    /** Contract address (Besu) or chaincode name (Fabric). */
+    contractAddress?: string;
+    chaincodeName?: string;
+    /** Channel name (Fabric). */
+    channelName?: string;
+    /** Network/chain ID (Besu). */
+    chainId?: number;
+    /** Relayer configuration (for ML-DSA verification). */
+    relayer?: {
+        endpoint: string;
+        publicKey?: string;
+    };
+}
+//# sourceMappingURL=p2mr-port.d.ts.map

package/dist/protocols/p2mr-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"p2mr-port.d.ts","sourceRoot":"","sources":["../../src/protocols/p2mr-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAM/D;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IAEd,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IAEpB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IAEjB,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IAEd,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IAEpB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAElB,yBAAyB;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,MAAM,EAAE,OAAO,CAAC;IAEhB,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IAEjB,mCAAmC;IACnC,MAAM,CAAC,EAAE,UAAU,CAAC;IAEpB,iCAAiC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,YAAY,CACV,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7B;;;;;;;OAOG;IACH,kBAAkB,CAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACvE;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7D;;;;;;;OAOG;IACH,iBAAiB,CACf,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,GACzD,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,oBACf,SAAQ,eAAe,EAAE,cAAc,EAAE,cAAc;IACvD;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAE/C;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uDAAuD;IACvD,OAAO,CAAC,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH"}

package/dist/protocols/p2mr-port.js

@@ -0,0 +1,12 @@
+/**
+ * P2MR (Pay-to-Merkle-Root) Protocol Port
+ *
+ * Defines the interface for P2MR operations across different blockchain protocols.
+ * Implementations provide protocol-specific handling while the domain layer
+ * remains protocol-agnostic.
+ *
+ * P2MR is BIP-360-inspired: outputs store only a Merkle root of spending conditions,
+ * keeping public keys private until spend time. This eliminates the quantum
+ * "harvest now, decrypt later" threat.
+ */
+export {};

package/dist/protocols/privacy-port.d.ts

@@ -0,0 +1,9 @@
+import type { PurchaseOrder, SharedOrderView } from "../privacy/domain/entities.js";
+/**
+ * Port for anchoring privacy-preserving order views on a distributed ledger.
+ */
+export interface PrivacyProtocolAdapter<TInvocation> {
+    anchorOrder(order: PurchaseOrder, auditProof: string): TInvocation;
+    publishAudienceView(view: SharedOrderView): TInvocation;
+}
+//# sourceMappingURL=privacy-port.d.ts.map

package/dist/protocols/privacy-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-port.d.ts","sourceRoot":"","sources":["../../src/protocols/privacy-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAChB,MAAM,+BAA+B,CAAC;AAEvC;;GAEG;AACH,MAAM,WAAW,sBAAsB,CAAC,WAAW;IACjD,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW,CAAC;IACnE,mBAAmB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAAC;CACzD"}

package/dist/protocols/privacy-port.js

@@ -0,0 +1 @@
+export {};

package/dist/protocols/traceability-port.d.ts

@@ -0,0 +1,12 @@
+import type { ProductLot, Shipment, TelemetryReading } from "../traceability/domain/entities.js";
+/**
+ * Port for projecting traceability commands onto a distributed ledger.
+ *
+ * Implementations translate domain operations into platform-specific
+ * invocations (Fabric chaincode, Besu contract calls, etc.).
+ */
+export interface TraceabilityProtocolAdapter<TInvocation> {
+    createLotCommand(lot: ProductLot): TInvocation;
+    recordShipmentCommand(shipment: Shipment, reading?: TelemetryReading): TInvocation;
+}
+//# sourceMappingURL=traceability-port.d.ts.map

package/dist/protocols/traceability-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceability-port.d.ts","sourceRoot":"","sources":["../../src/protocols/traceability-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,QAAQ,EACR,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B,CAAC,WAAW;IACtD,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAAC;IAC/C,qBAAqB,CACnB,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,gBAAgB,GACzB,WAAW,CAAC;CAChB"}

package/dist/protocols/traceability-port.js

@@ -0,0 +1 @@
+export {};

package/dist/shared/collection-store.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Append-only collection store for grouping items by key.
+ * Provides immutable read access via defensive copies.
+ */
+export declare class CollectionStore<K, V> {
+    private readonly store;
+    append(key: K, item: V): void;
+    getAll(key: K): readonly V[];
+    keys(): IterableIterator<K>;
+    private keySet;
+}
+//# sourceMappingURL=collection-store.d.ts.map

package/dist/shared/collection-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection-store.d.ts","sourceRoot":"","sources":["../../src/shared/collection-store.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,qBAAa,eAAe,CAAC,CAAC,EAAE,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI;IAM7B,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,SAAS,CAAC,EAAE;IAI5B,IAAI,IAAI,gBAAgB,CAAC,CAAC,CAAC;IAI3B,OAAO,CAAC,MAAM;CAOf"}

package/dist/shared/collection-store.js

@@ -0,0 +1,26 @@
+import { InMemoryStore } from "./store.js";
+/**
+ * Append-only collection store for grouping items by key.
+ * Provides immutable read access via defensive copies.
+ */
+export class CollectionStore {
+    store = new InMemoryStore();
+    append(key, item) {
+        const existing = this.store.get(key) ?? [];
+        existing.push(item);
+        this.store.set(key, existing);
+    }
+    getAll(key) {
+        return [...(this.store.get(key) ?? [])];
+    }
+    keys() {
+        return this.keySet().values();
+    }
+    keySet() {
+        const result = new Set();
+        for (const [key] of this.store.entries()) {
+            result.add(key);
+        }
+        return result;
+    }
+}

package/dist/shared/commit.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Create a cryptographic commitment for a secret share.
+ * The commitment binds the share value to a specific party and index,
+ * preventing substitution attacks.
+ *
+ * @param partyId - Identifier of the share holder
+ * @param index - Share index in the polynomial evaluation
+ * @param value - Share value (number for demo mode, bigint for production)
+ * @param nonce - Random nonce for hiding the value
+ */
+export declare function commitShare(partyId: string, index: number, value: number | bigint, nonce: string): string;
+/**
+ * Timing-safe comparison of two hex strings.
+ * Prevents timing attacks by ensuring constant-time comparison
+ * regardless of where the first difference occurs.
+ *
+ * The comparison decodes hex to bytes before comparing, ensuring
+ * the function behavior matches its documented contract.
+ *
+ * IMPORTANT: Both strings must be the same length (e.g., SHA-256 hashes).
+ * Malformed hex inputs (odd length, non-hex characters) return false.
+ */
+export declare function timingSafeCompare(a: string, b: string): boolean;
+//# sourceMappingURL=commit.d.ts.map

package/dist/shared/commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.d.ts","sourceRoot":"","sources":["../../src/shared/commit.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,KAAK,EAAE,MAAM,GACZ,MAAM,CAIR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CA0B/D"}

package/dist/shared/commit.js

@@ -0,0 +1,50 @@
+import { timingSafeEqual } from "node:crypto";
+import { sha256hex } from "./crypto.js";
+/**
+ * Create a cryptographic commitment for a secret share.
+ * The commitment binds the share value to a specific party and index,
+ * preventing substitution attacks.
+ *
+ * @param partyId - Identifier of the share holder
+ * @param index - Share index in the polynomial evaluation
+ * @param value - Share value (number for demo mode, bigint for production)
+ * @param nonce - Random nonce for hiding the value
+ */
+export function commitShare(partyId, index, value, nonce) {
+    // Convert bigint to string for consistent hashing
+    const valueStr = typeof value === "bigint" ? value.toString() : String(value);
+    return sha256hex(`${nonce}:${partyId}:${index}:${valueStr}`);
+}
+/**
+ * Timing-safe comparison of two hex strings.
+ * Prevents timing attacks by ensuring constant-time comparison
+ * regardless of where the first difference occurs.
+ *
+ * The comparison decodes hex to bytes before comparing, ensuring
+ * the function behavior matches its documented contract.
+ *
+ * IMPORTANT: Both strings must be the same length (e.g., SHA-256 hashes).
+ * Malformed hex inputs (odd length, non-hex characters) return false.
+ */
+export function timingSafeCompare(a, b) {
+    // Length check is not constant-time but reveals no secret data
+    if (a.length !== b.length) {
+        return false;
+    }
+    // Hex strings must have even length
+    if (a.length % 2 !== 0) {
+        return false;
+    }
+    // Validate hex format before decoding
+    const hexRegex = /^[0-9a-fA-F]*$/;
+    if (!hexRegex.test(a) || !hexRegex.test(b)) {
+        return false;
+    }
+    const bufA = Buffer.from(a, "hex");
+    const bufB = Buffer.from(b, "hex");
+    // Defensive check (should always be true given the above validation)
+    if (bufA.length !== bufB.length) {
+        return false;
+    }
+    return timingSafeEqual(bufA, bufB);
+}

package/dist/shared/crypto.d.ts

@@ -0,0 +1,2 @@
+export declare function sha256hex(value: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/shared/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/shared/crypto.ts"],"names":[],"mappings":"AAEA,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C"}

package/dist/shared/crypto.js

@@ -0,0 +1,4 @@
+import { createHash } from "node:crypto";
+export function sha256hex(value) {
+    return createHash("sha256").update(value).digest("hex");
+}

package/dist/shared/date.d.ts

@@ -0,0 +1,2 @@
+export declare function daysUntil(from: Date, to: Date): number;
+//# sourceMappingURL=date.d.ts.map

package/dist/shared/date.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"date.d.ts","sourceRoot":"","sources":["../../src/shared/date.ts"],"names":[],"mappings":"AAAA,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,MAAM,CAEtD"}

package/dist/shared/date.js

@@ -0,0 +1,3 @@
+export function daysUntil(from, to) {
+    return Math.ceil((to.getTime() - from.getTime()) / (1000 * 60 * 60 * 24));
+}

package/dist/shared/index.d.ts

@@ -0,0 +1,9 @@
+export { sha256hex } from "./crypto.js";
+export { commitShare, timingSafeCompare } from "./commit.js";
+export { daysUntil } from "./date.js";
+export type { ReadonlyStore, Store } from "./store.js";
+export { InMemoryStore } from "./store.js";
+export { CollectionStore } from "./collection-store.js";
+export type { Logger, LogFields } from "./logger.js";
+export { ConsoleLogger, noopLogger } from "./logger.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/shared/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/shared/index.js

@@ -0,0 +1,11 @@
+export { sha256hex } from "./crypto.js";
+export { commitShare, timingSafeCompare } from "./commit.js";
+export { daysUntil } from "./date.js";
+export { InMemoryStore } from "./store.js";
+export { CollectionStore } from "./collection-store.js";
+export { ConsoleLogger, noopLogger } from "./logger.js";
+// NOTE: Telemetry is NOT re-exported here to preserve optional peer dependency.
+// @opentelemetry/api is an optional peer dep and importing telemetry.ts at the
+// top level would fail when OTEL is not installed. Import telemetry directly:
+//   import "@psavelis/enterprise-blockchain/shared/telemetry-sdk";  // SDK init (side-effect)
+//   import { createTracer, ... } from "@psavelis/enterprise-blockchain/shared/telemetry";

package/dist/shared/logger.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Minimal structured logging port.
+ *
+ * Domain modules accept an optional Logger instance via constructor injection.
+ * When no logger is provided, operations run silently (zero behavior change).
+ * Teams can swap in Pino, Winston, or OpenTelemetry at integration time.
+ */
+export interface LogFields {
+    operation?: string;
+    entityId?: string;
+    result?: string;
+    durationMs?: number;
+    [key: string]: string | number | boolean | undefined;
+}
+export interface Logger {
+    info(msg: string, fields?: LogFields): void;
+    warn(msg: string, fields?: LogFields): void;
+    error(msg: string, fields?: LogFields): void;
+}
+/**
+ * No-op logger that silently discards all messages.
+ * Used as the default when no logger is provided.
+ */
+export declare const noopLogger: Logger;
+/**
+ * Simple console-based structured logger.
+ * Outputs JSON lines for machine consumption.
+ */
+export declare class ConsoleLogger implements Logger {
+    private readonly prefix;
+    constructor(prefix?: string);
+    info(msg: string, fields?: LogFields): void;
+    warn(msg: string, fields?: LogFields): void;
+    error(msg: string, fields?: LogFields): void;
+    private log;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/shared/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/shared/logger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,MAIxB,CAAC;AAEF;;;GAGG;AACH,qBAAa,aAAc,YAAW,MAAM;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,MAAM,SAAK;IAIvB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI;IAI3C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI;IAI3C,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI;IAI5C,OAAO,CAAC,GAAG;CAkBZ"}

package/dist/shared/logger.js

@@ -0,0 +1,45 @@
+/**
+ * No-op logger that silently discards all messages.
+ * Used as the default when no logger is provided.
+ */
+export const noopLogger = {
+    info() { },
+    warn() { },
+    error() { },
+};
+/**
+ * Simple console-based structured logger.
+ * Outputs JSON lines for machine consumption.
+ */
+export class ConsoleLogger {
+    prefix;
+    constructor(prefix = "") {
+        this.prefix = prefix;
+    }
+    info(msg, fields) {
+        this.log("info", msg, fields);
+    }
+    warn(msg, fields) {
+        this.log("warn", msg, fields);
+    }
+    error(msg, fields) {
+        this.log("error", msg, fields);
+    }
+    log(level, msg, fields) {
+        // Spread caller fields first, then apply reserved keys so they cannot
+        // be accidentally overridden by user-supplied LogFields.
+        const entry = {
+            ...fields,
+            level,
+            ts: new Date().toISOString(),
+            ...(this.prefix ? { module: this.prefix } : {}),
+            msg,
+        };
+        const writer = level === "error"
+            ? console.error
+            : level === "warn"
+                ? console.warn
+                : console.log;
+        writer(JSON.stringify(entry));
+    }
+}