@synoi/gap 0.1.0

package/dist/receipts.js

@@ -0,0 +1,14 @@
+/**
+ * receipts.ts -- GAP Decision Receipts.
+ *
+ * Every gate decision (capability invocation, workflow transition, grant
+ * issuance/revocation, federation handshake (reserved for GAP 1.1), provisional block) produces
+ * an immutable Decision Receipt. These are the audit trail of the agent
+ * platform -- what was allowed, what was denied, when, and by whom.
+ *
+ * Mirrors GAP_SPEC §8.
+ */
+export function isGapFailure(r) {
+    return typeof r === 'object' && r !== null && 'reason' in r;
+}
+//# sourceMappingURL=receipts.js.map

package/dist/receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.js","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA6JH,MAAM,UAAU,YAAY,CAAI,CAAiB;IAC/C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,IAAK,CAA6B,CAAA;AAC1F,CAAC"}

package/dist/revocations.d.ts

@@ -0,0 +1,65 @@
+/**
+ * revocations.ts -- RevocationEvent CDRO.
+ *
+ * Revocation in GAP is leveled (L1 / L2 / L3) per GAP_SPEC §7. V1 gateway
+ * scope is L1 only; L2/L3 fields are tracked here for forward compatibility.
+ *
+ * Targets include declarations, grants, workflow definitions, workflow
+ * instances, and whole skills. A revocation can be provisional (immediately
+ * blocks but pending finalization) or final.
+ */
+import type { GapCdroEnvelope } from './cdro.js';
+export type RevocationTargetKind = 'capability_declaration' | 'capability_grant' | 'workflow_definition' | 'workflow_instance' | 'skill';
+export interface RevocationEventBody {
+    target_kind: RevocationTargetKind;
+    target_oid: string;
+    reason: string;
+    evidence_oids?: string[];
+    required_level: 1 | 2 | 3;
+    provisional: boolean;
+    approvers: Array<{
+        actor_oid: string;
+        approved_at_ms: number;
+        cooling_off_satisfied: boolean;
+        attestation_oid?: string;
+    }>;
+    public_notice_started_at_ms?: number;
+    public_notice_window_ms?: number;
+    effective_at_ms: number | null;
+    lifted_at_ms?: number | null;
+    /**
+     * Controls what happens when a provisional block's TTL expires without the
+     * required L3 quorum completing:
+     *   'renew'  -- the block auto-renews (fail-closed). Default, and MUST be
+     *               the behavior when any targeted grant covers a capability
+     *               with physical_safety=true or safety_class='C'.
+     *   'revert' -- the block expires and the target is re-enabled. Only
+     *               permissible for safety_class A/B capabilities with explicit
+     *               operator override.
+     *
+     * Absent defaults to 'renew' for physical safety targets, 'revert' for
+     * others (legacy behavior). Gateways MUST treat absent-for-physical-safety
+     * as 'renew'.
+     */
+    provisional_block_policy?: {
+        on_expiry_without_quorum: 'renew' | 'revert';
+        /**
+         * M-5: Operator override for the provisional block TTL. Defaults to 72
+         * hours (259_200_000 ms). Minimum: 1 hour (3_600_000 ms). For
+         * safety_class C capabilities with on_expiry_without_quorum='renew', the
+         * renewal cycle period equals this value.
+         */
+        provisional_block_ttl_ms?: number;
+    };
+    /**
+     * Minimum number of distinct approvers required to make `effective_at_ms`
+     * non-null. Default: 1 for L2, gateway-configured for L3 (recommended >= 2).
+     * The gateway MUST reject a duplicate approval from the same actor_oid.
+     * Self-approval (approver actor_oid === revocation event created_by) MUST
+     * be rejected.
+     */
+    min_approvers?: number;
+}
+export type RevocationEvent = GapCdroEnvelope<RevocationEventBody>;
+export declare function revokeGapObject(target_kind: RevocationTargetKind, target_oid: string, reason: string, required_level: 1 | 2 | 3, provisional: boolean): RevocationEventBody;
+//# sourceMappingURL=revocations.d.ts.map

package/dist/revocations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocations.d.ts","sourceRoot":"","sources":["../src/revocations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD,MAAM,MAAM,oBAAoB,GAC5B,wBAAwB,GACxB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,OAAO,CAAA;AAEX,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,oBAAoB,CAAA;IACjC,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACzB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,KAAK,CAAC;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,cAAc,EAAE,MAAM,CAAA;QACtB,qBAAqB,EAAE,OAAO,CAAA;QAC9B,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,CAAC,CAAA;IACF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B;;;;;;;;;;;;;OAaG;IACH,wBAAwB,CAAC,EAAE;QACzB,wBAAwB,EAAE,OAAO,GAAG,QAAQ,CAAA;QAC5C;;;;;WAKG;QACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;KAClC,CAAA;IACD;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,eAAe,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAA;AAElE,wBAAgB,eAAe,CAC7B,WAAW,EAAE,oBAAoB,EACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EACzB,WAAW,EAAE,OAAO,GACnB,mBAAmB,CAUrB"}

package/dist/revocations.js

@@ -0,0 +1,22 @@
+/**
+ * revocations.ts -- RevocationEvent CDRO.
+ *
+ * Revocation in GAP is leveled (L1 / L2 / L3) per GAP_SPEC §7. V1 gateway
+ * scope is L1 only; L2/L3 fields are tracked here for forward compatibility.
+ *
+ * Targets include declarations, grants, workflow definitions, workflow
+ * instances, and whole skills. A revocation can be provisional (immediately
+ * blocks but pending finalization) or final.
+ */
+export function revokeGapObject(target_kind, target_oid, reason, required_level, provisional) {
+    return {
+        target_kind,
+        target_oid,
+        reason,
+        required_level,
+        provisional,
+        approvers: [],
+        effective_at_ms: null,
+    };
+}
+//# sourceMappingURL=revocations.js.map

package/dist/revocations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revocations.js","sourceRoot":"","sources":["../src/revocations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgEH,MAAM,UAAU,eAAe,CAC7B,WAAiC,EACjC,UAAkB,EAClB,MAAc,EACd,cAAyB,EACzB,WAAoB;IAEpB,OAAO;QACL,WAAW;QACX,UAAU;QACV,MAAM;QACN,cAAc;QACd,WAAW;QACX,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,IAAI;KACtB,CAAA;AACH,CAAC"}

package/dist/validate.d.ts

@@ -0,0 +1,59 @@
+/**
+ * validate.ts -- hand-rolled runtime validators for GAP CDROs.
+ *
+ * Design: every validator returns `{ ok, errors }`. `ok` is true iff `errors`
+ * is empty. Validators are non-throwing. They check shape (type + required
+ * fields) without semantic validation (a grant with `expires_at_ms` in the
+ * past is "shape-valid" -- separate runtime check rejects it).
+ *
+ * No zod / no io-ts. The style mirrors synoi-mcp-server/src/tools.ts:
+ * minimal, predictable, and easy to debug.
+ *
+ * Round-trip property: any envelope produced by these types, run through
+ * JSON.stringify -> JSON.parse -> validate*, produces ok=true with the same
+ * top-level keys + values.
+ */
+export interface ValidationResult {
+    ok: boolean;
+    errors: string[];
+}
+/**
+ * [DESIGN] Validates a gap:orchestration_chain body. Returns error
+ * 'delegation_depth_exceeded' when steps.length > 10.
+ */
+export declare function validateOrchestrationChainBody(x: unknown): ValidationResult;
+/**
+ * [DESIGN] Validates a TokenConsumption object from a receipt body.
+ */
+export declare function validateTokenConsumption(x: unknown): ValidationResult;
+/**
+ * [DESIGN] Validates a gap:consent_record body. consented MUST be boolean;
+ * actor_oid and context are required.
+ */
+export declare function validateConsentRecordBody(x: unknown): ValidationResult;
+/**
+ * [DESIGN] Validates a gap:pip_response body.
+ */
+export declare function validatePipResponseBody(x: unknown): ValidationResult;
+export declare function validateCapabilityDeclarationBody(x: unknown): ValidationResult;
+export declare function validateCapabilityGrantBody(x: unknown): ValidationResult;
+export declare function validateCapabilityInvocationBody(x: unknown): ValidationResult;
+export declare function validateWorkflowDefinitionBody(x: unknown): ValidationResult;
+export declare function validateWorkflowInstanceBody(x: unknown): ValidationResult;
+export declare function validateStageTransitionBody(x: unknown): ValidationResult;
+export declare function validateChannelEventBody(x: unknown): ValidationResult;
+export declare function validateGapDecisionReceiptBody(x: unknown): ValidationResult;
+export declare function validateRevocationEventBody(x: unknown): ValidationResult;
+export declare function validateCapabilityDeclaration(x: unknown): ValidationResult;
+export declare function validateCapabilityGrant(x: unknown): ValidationResult;
+export declare function validateCapabilityInvocation(x: unknown): ValidationResult;
+export declare function validateWorkflowDefinition(x: unknown): ValidationResult;
+export declare function validateWorkflowInstance(x: unknown): ValidationResult;
+export declare function validateStageTransition(x: unknown): ValidationResult;
+export declare function validateChannelEvent(x: unknown): ValidationResult;
+export declare function validateGapDecisionReceipt(x: unknown): ValidationResult;
+export declare function validateRevocationEvent(x: unknown): ValidationResult;
+export declare function validateOrchestrationChain(x: unknown): ValidationResult;
+export declare function validateConsentRecord(x: unknown): ValidationResult;
+export declare function validatePipResponse(x: unknown): ValidationResult;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiDH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAqLD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAkB3E;AAqBD;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAWrE;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAYtE;AAyCD;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAYpE;AAID,wBAAgB,iCAAiC,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA+C9E;AAED,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAyHxE;AAED,wBAAgB,gCAAgC,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAmE7E;AAED,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA2C3E;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAwCzE;AAED,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA6BxE;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAerE;AAED,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAiE3E;AAED,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAkExE;AAID,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAI1E;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIzE;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIvE;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIrE;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIjE;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIvE;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAID,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIvE;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIlE;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAIhE"}