@treeseed/sdk 0.13.0-rc.43 → 0.13.0-rc.45

package/dist/guarantees/evidence-trust.d.ts

@@ -0,0 +1,32 @@
+import type { GuaranteeDiagnostic, GuaranteeVerifierResult } from './index.js';
+export interface UiEvidenceTrustInput {
+    requestedDevice: {
+        id: string;
+        viewport: {
+            width: number;
+            height: number;
+        };
+        isMobile: boolean;
+        hasTouch: boolean;
+    };
+    actualDevice: {
+        id: string;
+        viewport: {
+            width: number;
+            height: number;
+        };
+        isMobile: boolean;
+        hasTouch: boolean;
+    };
+    consoleErrors?: Array<{
+        message: string;
+        asserted?: boolean;
+    }>;
+    networkErrors?: Array<{
+        status?: number;
+        message: string;
+        asserted?: boolean;
+    }>;
+}
+export declare function validateUiEvidenceTrust(input: UiEvidenceTrustInput): GuaranteeDiagnostic[];
+export declare function runUiEvidenceTrustVerifier(): GuaranteeVerifierResult;

package/dist/guarantees/evidence-trust.js

@@ -0,0 +1,47 @@
+function validateUiEvidenceTrust(input) {
+  const diagnostics = [];
+  const requested = input.requestedDevice, actual = input.actualDevice;
+  if (requested.id !== actual.id || requested.viewport.width !== actual.viewport.width || requested.viewport.height !== actual.viewport.height || requested.isMobile !== actual.isMobile || requested.hasTouch !== actual.hasTouch) {
+    diagnostics.push({ severity: "error", code: "guarantee.scene_device_mismatch", message: `Requested ${requested.id}, but evidence recorded ${actual.id}.` });
+  }
+  for (const error of input.consoleErrors ?? []) if (!error.asserted) diagnostics.push({
+    severity: "error",
+    code: "guarantee.scene_unexpected_console_error",
+    message: error.message
+  });
+  for (const error of input.networkErrors ?? []) if (!error.asserted) diagnostics.push({
+    severity: "error",
+    code: "guarantee.scene_unexpected_network_error",
+    message: error.message
+  });
+  return diagnostics;
+}
+function runUiEvidenceTrustVerifier() {
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const mismatch = validateUiEvidenceTrust({
+    requestedDevice: { id: "mobile_chromium", viewport: { width: 390, height: 844 }, isMobile: true, hasTouch: true },
+    actualDevice: { id: "desktop_chromium", viewport: { width: 1600, height: 900 }, isMobile: false, hasTouch: false },
+    consoleErrors: [{ message: "ReferenceError", asserted: false }],
+    networkErrors: [{ status: 500, message: "HTTP 500", asserted: false }]
+  });
+  const required = /* @__PURE__ */ new Set(["guarantee.scene_device_mismatch", "guarantee.scene_unexpected_console_error", "guarantee.scene_unexpected_network_error"]);
+  const observed = new Set(mismatch.map((entry) => entry.code));
+  const ok = [...required].every((code) => observed.has(code));
+  return {
+    schemaVersion: "treeseed.guarantee-verifier-result/v1",
+    verifierId: "@treeseed/sdk/ui-evidence-trust",
+    startedAt,
+    completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    ok,
+    checks: [{
+      id: "sdk.ui.evidence-trust",
+      status: ok ? "passed" : "failed",
+      durationMs: 0,
+      diagnostics: ok ? [] : [{ severity: "error", code: "guarantee.ui_evidence_trust_incomplete", message: "UI evidence trust did not reject every invalid vector." }]
+    }]
+  };
+}
+export {
+  runUiEvidenceTrustVerifier,
+  validateUiEvidenceTrust
+};

package/dist/guarantees/index.d.ts

@@ -1,3 +1,4 @@
+export { runUiEvidenceTrustVerifier, validateUiEvidenceTrust } from './evidence-trust.js';
 export type GuaranteeRunStatus = 'passed' | 'failed' | 'skipped' | 'blocked';
 export type GuaranteeFilter = Record<string, unknown>;
 export interface GuaranteeDiagnostic {
@@ -67,6 +68,40 @@ export interface GuaranteeRunReport {
     diagnostics?: GuaranteeDiagnostic[];
     [key: string]: unknown;
 }
+export interface ArtifactGuaranteeVerifier {
+    kind: 'artifact';
+    ownerPackage: string;
+    artifactId: string;
+    entrypoint: string;
+    exportName?: string;
+    caseId: string;
+    description?: string;
+}
+export interface CatalogOperationGuaranteeVerifier {
+    kind: 'catalogOperation';
+    ownerPackage: string;
+    operationId: string;
+    caseId: string;
+    description?: string;
+}
+export type GuaranteeVerifierDefinition = ArtifactGuaranteeVerifier | CatalogOperationGuaranteeVerifier;
+export interface GuaranteeVerifierCheck {
+    id: string;
+    status: 'passed' | 'failed';
+    durationMs: number;
+    diagnostics?: GuaranteeDiagnostic[];
+    error?: string;
+    evidence?: string[];
+}
+export interface GuaranteeVerifierResult {
+    schemaVersion: 'treeseed.guarantee-verifier-result/v1';
+    verifierId: string;
+    startedAt: string;
+    completedAt: string;
+    ok: boolean;
+    checks: GuaranteeVerifierCheck[];
+    [key: string]: unknown;
+}
 interface GuaranteeManifest {
     id: string;
     journey: string;
@@ -93,4 +128,3 @@ export declare function discoverGuarantees(input: {
         total: number;
     };
 };
-export {};

package/dist/guarantees/index.js

@@ -1,6 +1,7 @@
 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { relative, resolve } from "node:path";
 import { parse } from "yaml";
+import { runUiEvidenceTrustVerifier, validateUiEvidenceTrust } from "./evidence-trust.js";
 function walk(root, out = []) {
   if (!existsSync(root)) return out;
   for (const name of readdirSync(root)) {
@@ -37,5 +38,7 @@ function discoverGuarantees(input) {
   return { ok: diagnostics.every((entry) => entry.severity !== "error"), guarantees, diagnostics, counts: { total: guarantees.length } };
 }
 export {
-  discoverGuarantees
+  discoverGuarantees,
+  runUiEvidenceTrustVerifier,
+  validateUiEvidenceTrust
 };

package/dist/operator-contracts/oauth.d.ts

@@ -71,6 +71,16 @@ export interface OAuthDeviceAuthorizationResponse {
     expiresIn: number;
     interval: number;
 }
+/** Safe browser presentation of a pending device grant. It never contains the device code. */
+export interface OAuthDeviceApprovalPresentation {
+    schemaVersion: 'treeseed.oauth.device-approval-presentation/v1';
+    clientId: string;
+    clientName: string;
+    userCode: string;
+    scopes: OAuthScope[];
+    expiresAt: string;
+    status: 'pending';
+}
 export interface OAuthTokenReceipt {
     tokenType: 'Bearer';
     accessToken: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.13.0-rc.43",
+  "version": "0.13.0-rc.45",
   "description": "Portable TreeSeed contracts, standards, and typed remote control-plane clients.",
   "license": "Apache-2.0",
   "repository": {