@sempdev/semp 0.4.3

package/dist/reputation/abuse_report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abuse_report.d.ts","sourceRoot":"","sources":["../../src/reputation/abuse_report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EAGd,MAAM,YAAY,CAAC;AAOpB,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,aAAa,GAAG,MAAM,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CA+BnE;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,QAAQ,EACZ,aAAa,EAAE,aAAa,GAAG,IAAI,GAClC,OAAO,CAAC,IAAI,CAAC,CAoDf;AAOD,YAAY,EAAE,uBAAuB,EAAE,CAAC"}

package/dist/reputation/abuse_report.js

@@ -0,0 +1,111 @@
+/**
+ * SEMP_ABUSE_REPORT compose helpers per REPUTATION.md §3.2 / §3.5 /
+ * §3.7.
+ *
+ * Abuse reports flow user → home-server over an authenticated
+ * session — the handshake identifies the reporting user so the
+ * report itself does NOT carry its own signature. The report's
+ * evidence MAY include decrypted envelope fragments, in which case
+ * an embedded {@link DisclosureAuthorization} signed by the
+ * affected user is required per §3.5 + §3.7.
+ *
+ * @module
+ */
+import { AbuseReportType, Version, } from "./types.js";
+import { authAllowsBrief, authAllowsEnclosure, verifyDisclosureAuthorization, } from "./sign.js";
+/**
+ * Construct a SEMP_ABUSE_REPORT with `type` / `version` /
+ * `timestamp` / `extensions` pre-populated.
+ *
+ * Throws when required fields are missing.
+ */
+export function newAbuseReport(input) {
+    if (input.id === "") {
+        throw new Error("reputation: abuse report missing id");
+    }
+    if (input.reporter === "") {
+        throw new Error("reputation: abuse report missing reporter");
+    }
+    if (input.reported_domain === "") {
+        throw new Error("reputation: abuse report missing reported_domain");
+    }
+    if (input.category === "") {
+        throw new Error("reputation: abuse report missing category");
+    }
+    const r = {
+        type: AbuseReportType,
+        version: Version,
+        id: input.id,
+        reporter: input.reporter,
+        reported_domain: input.reported_domain,
+        category: input.category,
+        timestamp: isoSecond((input.nowFn ?? (() => new Date()))()),
+        evidence: input.evidence,
+        extensions: input.extensions ?? {},
+    };
+    if (input.reported_address !== undefined && input.reported_address !== "") {
+        r.reported_address = input.reported_address;
+    }
+    if (input.description !== undefined && input.description !== "") {
+        r.description = input.description;
+    }
+    return r;
+}
+/**
+ * Walk an evidence payload and enforce the §3.7 rule: decrypted
+ * content requires a valid {@link DisclosureAuthorization} signed
+ * by the affected user.
+ *
+ * Metadata-only evidence is always acceptable — postmark + seal
+ * data is verifiable from the sender's published domain key without
+ * disclosing user content.
+ *
+ * Sealed evidence with disclosed brief / enclosure requires:
+ *
+ *  1. An embedded `disclosure_authorization`;
+ *  2. The authorization's `scope` covers what's actually disclosed;
+ *  3. The authorization's signature verifies under the affected
+ *     user's identity public key.
+ *
+ * Throws on the first violation.
+ */
+export async function validateEvidence(ev, userKeyLookup) {
+    if (ev.type === "envelope_metadata") {
+        return;
+    }
+    if (ev.type !== "sealed_evidence") {
+        throw new Error(`reputation: unknown evidence type ${JSON.stringify(ev.type)}`);
+    }
+    for (let i = 0; i < ev.envelopes.length; i++) {
+        const env = ev.envelopes[i];
+        const discloses = env.disclosed_brief !== undefined || env.disclosed_enclosure !== undefined;
+        if (!discloses) {
+            continue;
+        }
+        if (env.disclosure_authorization === undefined) {
+            throw new Error(`reputation: envelope[${i}]: decrypted content without disclosure authorization`);
+        }
+        const auth = env.disclosure_authorization;
+        if (env.disclosed_brief !== undefined && !authAllowsBrief(auth)) {
+            throw new Error(`reputation: envelope[${i}]: brief disclosure outside authorized scope ${JSON.stringify(auth.scope)}`);
+        }
+        if (env.disclosed_enclosure !== undefined &&
+            !authAllowsEnclosure(auth)) {
+            throw new Error(`reputation: envelope[${i}]: enclosure disclosure outside authorized scope ${JSON.stringify(auth.scope)}`);
+        }
+        if (userKeyLookup === null) {
+            throw new Error(`reputation: envelope[${i}]: sealed evidence not accepted (handler lacks user key lookup)`);
+        }
+        const pub = await userKeyLookup(auth.user);
+        if (pub === null || pub.length === 0) {
+            throw new Error(`reputation: envelope[${i}]: unknown user ${JSON.stringify(auth.user)} in disclosure authorization`);
+        }
+        if (!verifyDisclosureAuthorization(auth, pub)) {
+            throw new Error(`reputation: envelope[${i}]: disclosure authorization signature did not verify`);
+        }
+    }
+}
+function isoSecond(d) {
+    return d.toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+//# sourceMappingURL=abuse_report.js.map

package/dist/reputation/abuse_report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abuse_report.js","sourceRoot":"","sources":["../../src/reputation/abuse_report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAKL,eAAe,EACf,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,WAAW,CAAC;AAiBnB;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAK,KAAK,CAAC,QAAmB,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,CAAC,GAAgB;QACrB,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,OAAO;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3D,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;KACnC,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC1E,CAAC,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAChE,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AASD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAY,EACZ,aAAmC;IAEnC,IAAI,EAAE,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAE,EAAuB,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,SAAS,GACb,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC;QAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,uDAAuD,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,wBAAwB,CAAC;QAC1C,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACtG,CAAC;QACJ,CAAC;QACD,IACE,GAAG,CAAC,mBAAmB,KAAK,SAAS;YACrC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAC1B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,oDAAoD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,iEAAiE,CAC3F,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CACpG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,6BAA6B,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,sDAAsD,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC"}

package/dist/reputation/bucketize.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Metric bucketing per REPUTATION.md §4.5.1 + §4.5.2.
+ *
+ * Counts published on the wire are rounded UP to the nearest power
+ * of two in the sequence 0, 1, 2, 4, 8, ..., 1048576. Above the cap
+ * they clamp to MaxMetricBucket. AbuseCategories are deduplicated
+ * (a receiver could otherwise read the array's length and recover
+ * the raw `abuse_reports` count, defeating the §4.5.1 bucketing).
+ *
+ * @module
+ */
+import type { AbuseCategory, Metrics } from "./types.js";
+/**
+ * Round `n` up to the nearest power-of-two bucket per §4.5.1.
+ * Values above {@link MaxMetricBucket} clamp to MaxMetricBucket.
+ */
+export declare function bucketize(n: number): number;
+/**
+ * Apply bucketing + abuse-category deduplication to `m` IN PLACE
+ * per §4.5.1 + §4.5.2. Called by signObservation before the
+ * canonical bytes are computed so the signed record carries
+ * bucketed counts and a deduplicated category set.
+ */
+export declare function applyBucketing(m: Metrics): void;
+/**
+ * Return a new array of distinct non-empty categories in
+ * first-occurrence order. Returns `undefined` for empty input so
+ * the JSON omits the field entirely.
+ */
+export declare function dedupeAbuseCategories(cats: AbuseCategory[] | undefined): AbuseCategory[] | undefined;
+//# sourceMappingURL=bucketize.d.ts.map

package/dist/reputation/bucketize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucketize.d.ts","sourceRoot":"","sources":["../../src/reputation/bucketize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGzD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAY3C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAiB/C;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,aAAa,EAAE,GAAG,SAAS,GAChC,aAAa,EAAE,GAAG,SAAS,CAiB7B"}

package/dist/reputation/bucketize.js

@@ -0,0 +1,77 @@
+/**
+ * Metric bucketing per REPUTATION.md §4.5.1 + §4.5.2.
+ *
+ * Counts published on the wire are rounded UP to the nearest power
+ * of two in the sequence 0, 1, 2, 4, 8, ..., 1048576. Above the cap
+ * they clamp to MaxMetricBucket. AbuseCategories are deduplicated
+ * (a receiver could otherwise read the array's length and recover
+ * the raw `abuse_reports` count, defeating the §4.5.1 bucketing).
+ *
+ * @module
+ */
+import { MaxMetricBucket } from "./types.js";
+/**
+ * Round `n` up to the nearest power-of-two bucket per §4.5.1.
+ * Values above {@link MaxMetricBucket} clamp to MaxMetricBucket.
+ */
+export function bucketize(n) {
+    if (!Number.isFinite(n) || n <= 0) {
+        return 0;
+    }
+    if (n >= MaxMetricBucket) {
+        return MaxMetricBucket;
+    }
+    let b = 1;
+    while (b < n) {
+        b <<= 1;
+    }
+    return b;
+}
+/**
+ * Apply bucketing + abuse-category deduplication to `m` IN PLACE
+ * per §4.5.1 + §4.5.2. Called by signObservation before the
+ * canonical bytes are computed so the signed record carries
+ * bucketed counts and a deduplicated category set.
+ */
+export function applyBucketing(m) {
+    m.envelopes_received = bucketize(m.envelopes_received);
+    m.envelopes_rejected = bucketize(m.envelopes_rejected);
+    m.abuse_reports = bucketize(m.abuse_reports);
+    if (m.unique_senders_observed !== undefined) {
+        m.unique_senders_observed = bucketize(m.unique_senders_observed);
+    }
+    if (m.handshakes_completed !== undefined) {
+        m.handshakes_completed = bucketize(m.handshakes_completed);
+    }
+    if (m.handshakes_rejected !== undefined) {
+        m.handshakes_rejected = bucketize(m.handshakes_rejected);
+    }
+    m.abuse_categories = dedupeAbuseCategories(m.abuse_categories);
+    if (m.abuse_categories === undefined) {
+        delete m.abuse_categories;
+    }
+}
+/**
+ * Return a new array of distinct non-empty categories in
+ * first-occurrence order. Returns `undefined` for empty input so
+ * the JSON omits the field entirely.
+ */
+export function dedupeAbuseCategories(cats) {
+    if (cats === undefined || cats.length === 0) {
+        return undefined;
+    }
+    const seen = new Set();
+    const out = [];
+    for (const c of cats) {
+        if (typeof c !== "string" || c === "") {
+            continue;
+        }
+        if (seen.has(c)) {
+            continue;
+        }
+        seen.add(c);
+        out.push(c);
+    }
+    return out.length === 0 ? undefined : out;
+}
+//# sourceMappingURL=bucketize.js.map

package/dist/reputation/bucketize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucketize.js","sourceRoot":"","sources":["../../src/reputation/bucketize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC;QACzB,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,CAAC,KAAK,CAAC,CAAC;IACV,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,CAAC,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACvD,CAAC,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAC5C,CAAC,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACzC,CAAC,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACxC,CAAC,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IACD,CAAC,CAAC,gBAAgB,GAAG,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,CAAC,gBAAgB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAiC;IAEjC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAC;IACtC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAY,KAAK,EAAE,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC"}

package/dist/reputation/gossip.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Gossip-hash summary per REPUTATION.md §5.
+ *
+ * `computeGossipHash(domain, observations)` returns a stable digest
+ * over (domain, [{id, timestamp}, ...]) so two observers with the
+ * same observation set produce byte-identical hashes and can detect
+ * divergence cheaply.
+ *
+ * The hash covers only ids + timestamps, not full metric bodies, so
+ * a comparison remains meaningful when two observers report the
+ * same underlying events with slightly different metrics. Callers
+ * that want a full-body comparison walk the observations themselves.
+ *
+ * @module
+ */
+import type { GossipHash, Observation } from "./types.js";
+/**
+ * Compute the publishable {@link GossipHash} for `domain` given
+ * `observations`. Throws when `domain` is empty. An empty
+ * `observations` slice is allowed (legitimate "I have no
+ * observations for this subject" publication).
+ */
+export declare function computeGossipHash(domain: string, observations: Observation[], now?: Date): GossipHash;
+//# sourceMappingURL=gossip.d.ts.map

package/dist/reputation/gossip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip.d.ts","sourceRoot":"","sources":["../../src/reputation/gossip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE1D;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,WAAW,EAAE,EAC3B,GAAG,GAAE,IAAiB,GACrB,UAAU,CA0BZ"}

package/dist/reputation/gossip.js

@@ -0,0 +1,64 @@
+/**
+ * Gossip-hash summary per REPUTATION.md §5.
+ *
+ * `computeGossipHash(domain, observations)` returns a stable digest
+ * over (domain, [{id, timestamp}, ...]) so two observers with the
+ * same observation set produce byte-identical hashes and can detect
+ * divergence cheaply.
+ *
+ * The hash covers only ids + timestamps, not full metric bodies, so
+ * a comparison remains meaningful when two observers report the
+ * same underlying events with slightly different metrics. Callers
+ * that want a full-body comparison walk the observations themselves.
+ *
+ * @module
+ */
+import { sha256 } from "@noble/hashes/sha2.js";
+import { marshal as canonicalMarshal } from "../canonical/index.js";
+/**
+ * Compute the publishable {@link GossipHash} for `domain` given
+ * `observations`. Throws when `domain` is empty. An empty
+ * `observations` slice is allowed (legitimate "I have no
+ * observations for this subject" publication).
+ */
+export function computeGossipHash(domain, observations, now = new Date()) {
+    if (domain.trim() === "") {
+        throw new Error("reputation: gossip hash requires a domain");
+    }
+    // Stable order so two observers who hold the same set produce the
+    // same hash regardless of internal iteration order.
+    const entries = observations
+        .map((o) => ({ id: o.id, timestamp: o.timestamp }))
+        .sort((a, b) => {
+        if (a.id !== b.id) {
+            return a.id < b.id ? -1 : 1;
+        }
+        return a.timestamp < b.timestamp ? -1 : a.timestamp > b.timestamp ? 1 : 0;
+    });
+    const payload = {
+        domain: domain.trim().toLowerCase(),
+        entries,
+    };
+    const canonical = canonicalMarshal(payload);
+    const sum = sha256(canonical);
+    return {
+        domain: payload.domain,
+        hash: bytesToHex(sum),
+        algorithm: "sha256",
+        as_of: isoSecond(now),
+    };
+}
+function isoSecond(d) {
+    return d.toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+function bytesToHex(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("hex");
+    }
+    let out = "";
+    for (let i = 0; i < b.length; i++) {
+        out += (b[i] ?? 0).toString(16).padStart(2, "0");
+    }
+    return out;
+}
+//# sourceMappingURL=gossip.js.map

package/dist/reputation/gossip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip.js","sourceRoot":"","sources":["../../src/reputation/gossip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAIpE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,YAA2B,EAC3B,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,kEAAkE;IAClE,oDAAoD;IACpD,MAAM,OAAO,GAAG,YAAY;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;SAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;KACR,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAA6C,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;QACrB,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/reputation/gossip_fetch.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Trust-gossip publication HTTP client per REPUTATION.md §5.1.
+ *
+ * Observers publish their {@link TrustObservations} envelopes at:
+ *
+ * ```
+ * https://<observer>/.well-known/semp/reputation/<subject>
+ * ```
+ *
+ * Fetching servers GET that URL, verify the envelope-level
+ * signature, and use the inner observations to make trust
+ * decisions. The fetcher is `fetch`-injectable so tests can stub
+ * the HTTPS round-trip; production callers omit `fetchImpl` and the
+ * fetcher uses Node 22+'s global `fetch`.
+ *
+ * @module
+ */
+import { type FetchLike } from "../discovery/index.js";
+import { type TrustObservations } from "./types.js";
+/**
+ * Maximum body the fetcher accepts from a remote observer. 1 MiB is
+ * enough for a substantial observation publication (hundreds of
+ * inner records) without letting a hostile observer feed us
+ * unbounded JSON.
+ */
+export declare const TrustGossipMaxBytes: number;
+/** Options to {@link fetchTrustObservations}. */
+export interface FetchTrustObservationsOptions {
+    /** Override the fetch implementation. Defaults to `globalThis.fetch`. */
+    fetchImpl?: FetchLike;
+    /** Optional cancellation signal. */
+    signal?: AbortSignal;
+    /**
+     * Per-request timeout in milliseconds. Defaults to 10 seconds —
+     * matches `discovery.fetchConfiguration`.
+     */
+    timeoutMs?: number;
+    /**
+     * Override the URL produced for `(observer, subject)`. Defaults to
+     * `https://<observer>${PublicationPath}<subject>`. Tests use this
+     * to point at an httptest server.
+     */
+    urlFn?: (observer: string, subject: string) => string;
+    /**
+     * Override the byte cap. Defaults to {@link TrustGossipMaxBytes}.
+     */
+    maxBytes?: number;
+}
+/**
+ * GET the trust-gossip publication for `subject` from `observer`,
+ * verify the envelope-level signature with `observerPub`, and
+ * return the parsed envelope.
+ *
+ * Per-observation signatures inside `result.observations` are NOT
+ * verified — callers walk those and call
+ * {@link "./sign".verifyObservation} on each, because different
+ * observations in the same envelope MAY be signed under different
+ * key_ids (e.g. after a key rotation).
+ *
+ * Throws on transport failure, malformed JSON, body cap exceeded,
+ * unsigned envelope, or signature mismatch.
+ */
+export declare function fetchTrustObservations(observer: string, subject: string, observerPub: Uint8Array, opts?: FetchTrustObservationsOptions): Promise<TrustObservations>;
+//# sourceMappingURL=gossip_fetch.d.ts.map

package/dist/reputation/gossip_fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip_fetch.d.ts","sourceRoot":"","sources":["../../src/reputation/gossip_fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,KAAK,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAGrE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAAkB,CAAC;AAEnD,iDAAiD;AACjD,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACtD;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,UAAU,EACvB,IAAI,GAAE,6BAAkC,GACvC,OAAO,CAAC,iBAAiB,CAAC,CA+E5B"}

package/dist/reputation/gossip_fetch.js

@@ -0,0 +1,114 @@
+/**
+ * Trust-gossip publication HTTP client per REPUTATION.md §5.1.
+ *
+ * Observers publish their {@link TrustObservations} envelopes at:
+ *
+ * ```
+ * https://<observer>/.well-known/semp/reputation/<subject>
+ * ```
+ *
+ * Fetching servers GET that URL, verify the envelope-level
+ * signature, and use the inner observations to make trust
+ * decisions. The fetcher is `fetch`-injectable so tests can stub
+ * the HTTPS round-trip; production callers omit `fetchImpl` and the
+ * fetcher uses Node 22+'s global `fetch`.
+ *
+ * @module
+ */
+import {} from "../discovery/index.js";
+import { PublicationPath } from "./types.js";
+import { verifyTrustObservations } from "./sign.js";
+/**
+ * Maximum body the fetcher accepts from a remote observer. 1 MiB is
+ * enough for a substantial observation publication (hundreds of
+ * inner records) without letting a hostile observer feed us
+ * unbounded JSON.
+ */
+export const TrustGossipMaxBytes = 1 * 1024 * 1024;
+/**
+ * GET the trust-gossip publication for `subject` from `observer`,
+ * verify the envelope-level signature with `observerPub`, and
+ * return the parsed envelope.
+ *
+ * Per-observation signatures inside `result.observations` are NOT
+ * verified — callers walk those and call
+ * {@link "./sign".verifyObservation} on each, because different
+ * observations in the same envelope MAY be signed under different
+ * key_ids (e.g. after a key rotation).
+ *
+ * Throws on transport failure, malformed JSON, body cap exceeded,
+ * unsigned envelope, or signature mismatch.
+ */
+export async function fetchTrustObservations(observer, subject, observerPub, opts = {}) {
+    if (observer === "") {
+        throw new Error("reputation: empty observer");
+    }
+    if (subject === "") {
+        throw new Error("reputation: empty subject");
+    }
+    if (observerPub.length === 0) {
+        throw new Error("reputation: empty observer public key");
+    }
+    const url = opts.urlFn !== undefined
+        ? opts.urlFn(observer, subject)
+        : `https://${observer}${PublicationPath}${encodeURIComponent(subject)}`;
+    const fetchFn = opts.fetchImpl ?? globalThis.fetch;
+    if (fetchFn === undefined) {
+        throw new Error("reputation: no fetch implementation available (Node 22+ or pass fetchImpl)");
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 10_000);
+    // Wire the caller's signal through too so external cancellation
+    // propagates.
+    let externalSubscribed = false;
+    const onAbort = () => {
+        controller.abort();
+    };
+    if (opts.signal !== undefined) {
+        if (opts.signal.aborted) {
+            controller.abort();
+        }
+        else {
+            opts.signal.addEventListener("abort", onAbort, { once: true });
+            externalSubscribed = true;
+        }
+    }
+    let resp;
+    try {
+        resp = await fetchFn(url, {
+            method: "GET",
+            headers: { Accept: "application/json" },
+            signal: controller.signal,
+        });
+    }
+    finally {
+        clearTimeout(timer);
+        if (externalSubscribed) {
+            opts.signal.removeEventListener("abort", onAbort);
+        }
+    }
+    if (!resp.ok) {
+        throw new Error(`reputation: ${url} returned HTTP ${resp.status}`);
+    }
+    const body = await resp.text();
+    const cap = opts.maxBytes ?? TrustGossipMaxBytes;
+    if (body.length > cap) {
+        throw new Error(`reputation: trust gossip body exceeds ${cap} bytes (got ${body.length})`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch (err) {
+        throw new Error(`reputation: parse trust observations: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error("reputation: trust observations is not a JSON object");
+    }
+    const env = parsed;
+    if (!verifyTrustObservations(env, observerPub)) {
+        throw new Error("reputation: trust observations signature did not verify");
+    }
+    return env;
+}
+//# sourceMappingURL=gossip_fetch.js.map

package/dist/reputation/gossip_fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gossip_fetch.js","sourceRoot":"","sources":["../../src/reputation/gossip_fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAkB,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAA0B,eAAe,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAyBnD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,OAAe,EACf,WAAuB,EACvB,OAAsC,EAAE;IAExC,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GACP,IAAI,CAAC,KAAK,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC/B,CAAC,CAAC,WAAW,QAAQ,GAAG,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5E,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAA+B,CAAC;IAChE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,SAAS,IAAI,MAAM,CACzB,CAAC;IACF,gEAAgE;IAChE,cAAc;IACd,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,kBAAkB,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,IAAI,IAAoC,CAAC;IACzC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,MAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,kBAAkB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,eAAe,IAAI,CAAC,MAAM,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,MAA2B,CAAC;IACxC,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/reputation/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Reputation layer per REPUTATION.md.
+ *
+ * Wire records (observation, trust-observations envelope, abuse
+ * report, disclosure authorization), bucketing + dedup helpers,
+ * sign / verify primitives, in-memory observation store with
+ * scoring, gossip hash, and PoW challenge issuer + ledger.
+ *
+ * @module
+ */
+export { type AbuseCategory, type AbuseReport, type Assessment, type DisclosureAuthorization, type DisclosureScope, type Evidence, type GossipHash, type Metrics, type Observation, type ReputationSignature, type SealedEnvelopeEvidence, type TrustObservations, type Window, AbuseReportType, MaxMetricBucket, ObservationType, ObservationsEnvelopeType, PublicationPath, Version, isKnownAbuseCategory, } from "./types.js";
+export { applyBucketing, bucketize, dedupeAbuseCategories, } from "./bucketize.js";
+export { SignatureAlgorithmEd25519, authAllowsBrief, authAllowsEnclosure, signDisclosureAuthorization, signObservation, signTrustObservations, validateAbuseReport, verifyDisclosureAuthorization, verifyObservation, verifyTrustObservations, } from "./sign.js";
+export { type Score, ObservationStore, classifyScore, } from "./observation_store.js";
+export { computeGossipHash } from "./gossip.js";
+export { type PoWChallenge, ChallengeLedger, DefaultChallengeTTLMs, DifficultyBaseline, DifficultyHostile, DifficultyRelaxed, DifficultySuspicious, DomainAgeGateDays, MinPrefixBytes, PoWAlgorithm, challengePrefixBase64, difficultyForAge, difficultyForAssessment, issueChallenge, } from "./pow.js";
+export { type WHOIS, MinDomainAgeMs, meetsMinAge, } from "./whois.js";
+export { type AbuseReportInput, type UserKeyLookup, newAbuseReport, validateEvidence, } from "./abuse_report.js";
+export { type FetchTrustObservationsOptions, TrustGossipMaxBytes, fetchTrustObservations, } from "./gossip_fetch.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/reputation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reputation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,MAAM,EACX,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,OAAO,EACP,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,SAAS,EACT,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,6BAA6B,EAC7B,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,KAAK,KAAK,EACV,gBAAgB,EAChB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EACL,KAAK,YAAY,EACjB,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,KAAK,KAAK,EACV,cAAc,EACd,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,6BAA6B,EAClC,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC"}

package/dist/reputation/index.js

@@ -0,0 +1,20 @@
+/**
+ * Reputation layer per REPUTATION.md.
+ *
+ * Wire records (observation, trust-observations envelope, abuse
+ * report, disclosure authorization), bucketing + dedup helpers,
+ * sign / verify primitives, in-memory observation store with
+ * scoring, gossip hash, and PoW challenge issuer + ledger.
+ *
+ * @module
+ */
+export { AbuseReportType, MaxMetricBucket, ObservationType, ObservationsEnvelopeType, PublicationPath, Version, isKnownAbuseCategory, } from "./types.js";
+export { applyBucketing, bucketize, dedupeAbuseCategories, } from "./bucketize.js";
+export { SignatureAlgorithmEd25519, authAllowsBrief, authAllowsEnclosure, signDisclosureAuthorization, signObservation, signTrustObservations, validateAbuseReport, verifyDisclosureAuthorization, verifyObservation, verifyTrustObservations, } from "./sign.js";
+export { ObservationStore, classifyScore, } from "./observation_store.js";
+export { computeGossipHash } from "./gossip.js";
+export { ChallengeLedger, DefaultChallengeTTLMs, DifficultyBaseline, DifficultyHostile, DifficultyRelaxed, DifficultySuspicious, DomainAgeGateDays, MinPrefixBytes, PoWAlgorithm, challengePrefixBase64, difficultyForAge, difficultyForAssessment, issueChallenge, } from "./pow.js";
+export { MinDomainAgeMs, meetsMinAge, } from "./whois.js";
+export { newAbuseReport, validateEvidence, } from "./abuse_report.js";
+export { TrustGossipMaxBytes, fetchTrustObservations, } from "./gossip_fetch.js";
+//# sourceMappingURL=index.js.map

package/dist/reputation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/reputation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAcL,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,OAAO,EACP,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,SAAS,EACT,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,6BAA6B,EAC7B,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAEL,gBAAgB,EAChB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAEL,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EAEL,cAAc,EACd,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC"}

package/dist/reputation/observation_store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Per-domain signal ledger + Score derivation per REPUTATION.md §4.
+ *
+ * The store records raw counters as they happen (one call per
+ * handshake/envelope/abuse) and exposes a {@link Score} query that
+ * turns the counters into a Score + {@link Assessment} + the
+ * "currently suspicious" verdict operators plug into their PoW
+ * policy hook.
+ *
+ * Production deployments wrap a durable backend; this is the
+ * reference in-memory store.
+ *
+ * @module
+ */
+import type { AbuseCategory, Assessment, Metrics } from "./types.js";
+/** Derived reputation verdict per §4.6. */
+export interface Score {
+    domain: string;
+    total_envelopes: number;
+    /** [0, 1]. Zero when total_envelopes is zero. */
+    abuse_rate: number;
+    /** [0, 1]. */
+    reject_rate: number;
+    /** [0, 1] over handshakes attempted. */
+    handshake_reject_rate: number;
+    /** First time any signal was recorded. `null` if unobserved. */
+    first_seen: Date | null;
+    /** Whole-day age, or -1 if first_seen is null. */
+    age_days: number;
+    assessment: Assessment;
+}
+/** In-memory {@link ObservationStore}. Single-process. */
+export declare class ObservationStore {
+    private readonly domains;
+    private readonly firstSeen;
+    private readonly nowFn;
+    constructor(nowFn?: () => Date);
+    /** Record one handshake outcome. */
+    recordHandshake(domain: string, ok: boolean): void;
+    /** Record one envelope outcome. */
+    recordEnvelope(domain: string, accepted: boolean): void;
+    /**
+     * Record one abuse report. The caller is expected to have
+     * verified the report's authenticity and any embedded disclosure
+     * authorization before calling.
+     */
+    recordAbuseReport(domain: string, category: AbuseCategory | ""): void;
+    /** Snapshot of the current counters as a publishable {@link Metrics}. */
+    metrics(domain: string): Metrics;
+    /** Compute the current {@link Score} for `domain`. */
+    score(domain: string): Score;
+    /** Clear all counters for `domain`. */
+    reset(domain: string): void;
+    /** Number of domains with at least one recorded signal. */
+    size(): number;
+    private touch;
+}
+/**
+ * Default scoring curve (REPUTATION.md §4.6 + §8.3.2):
+ *
+ *  - abuse_rate ≥ 0.05 OR reject_rate ≥ 0.50 → hostile
+ *  - abuse_rate ≥ 0.01 OR reject_rate ≥ 0.20 → suspicious
+ *  - abuse_rate == 0 AND reject_rate < 0.05 AND total ≥ 100 → trusted
+ *  - otherwise → neutral
+ */
+export declare function classifyScore(s: Score): Assessment;
+//# sourceMappingURL=observation_store.d.ts.map