@vauban-org/agent-sdk 0.17.4 → 1.2.0

package/dist/ports/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/ports/observability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwFH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACf,QAAQ,GAAS;QAChC,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;QACtB,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;QACzB,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;QACnB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;KACd,CAAC;IAEF,SAAS,CAAC,KAAa,EAAE,MAAuB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,MAA0B;QACpC,QAAQ;IACV,CAAC;IAED,YAAY,CAAC,OAAoB;QAC/B,QAAQ;IACV,CAAC;IAED,KAAK,CAAC,KAAK;QACT,QAAQ;IACV,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACE;IAA7C,YAAY,OAAe,EAAkB,KAAe;QAC1D,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,UAAK,GAAL,KAAK,CAAU;QAE1D,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAErC;IACA;IAFlB,YACkB,SAAiB,EACjB,KAAe;QAE/B,KAAK,CAAC,uCAAuC,SAAS,IAAI,CAAC,CAAC;QAH5C,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/ports/outcome.d.ts

@@ -4,6 +4,10 @@
  * Host attributes a monetary value to each agent run via its
  * domain-specific rules (config/outcomes.yaml in CC). The agent simply
  * calls recordOutcomeAsync after its tracker.finish() — fire-and-forget.
+ *
+ * OTel instrumentation: import { createTracedOutcomePort } to wrap any
+ * OutcomePort implementation with OpenTelemetry spans. Gracefully degrades
+ * to noop spans when no OTel SDK is installed.
  */
 export interface AgentRunRef {
     /** agent_run.id (UUID) produced by AgentRunTracker. */
@@ -15,6 +19,17 @@ export interface AgentRunRef {
     /** Already-linked outcome id; idempotency guard. */
     outcome_id?: string | null;
 }
+/**
+ * Thrown when the outcome store write fails (DB connection lost, serialization
+ * error, or queue full). Since recordOutcomeAsync is fire-and-forget, this
+ * error is surfaced only when the implementation chooses to throw synchronously
+ * (e.g., during validation or when the write queue is persistently full).
+ */
+export declare class OutcomeWriteError extends Error {
+    readonly cause?: unknown | undefined;
+    readonly runId: string;
+    constructor(message: string, runId: string, cause?: unknown | undefined);
+}
 export interface OutcomePort {
     /**
      * Enqueue outcome attribution. Fire-and-forget: never throws,
@@ -22,4 +37,15 @@ export interface OutcomePort {
      */
     recordOutcomeAsync(run: AgentRunRef): void;
 }
+/**
+ * Wrap any OutcomePort implementation with OTel spans.
+ * The span captures the run id and agent_id as attributes.
+ * Gracefully degrades to noop spans when no OTel SDK is installed.
+ *
+ * Usage:
+ *   const raw: OutcomePort = buildPostgresOutcome(...);
+ *   const traced = createTracedOutcomePort(raw);
+ *   traced.recordOutcomeAsync({...}) // emits "outcome.recordOutcomeAsync" span
+ */
+export declare function createTracedOutcomePort(impl: OutcomePort): OutcomePort;
 //# sourceMappingURL=outcome.d.ts.map

package/dist/ports/outcome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outcome.d.ts","sourceRoot":"","sources":["../../src/ports/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5C"}
+{"version":3,"file":"outcome.d.ts","sourceRoot":"","sources":["../../src/ports/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAGkB,KAAK,CAAC,EAAE,OAAO;IAF3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAkB,KAAK,CAAC,EAAE,OAAO,YAAA;CAM5E;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CA6BtE"}

package/dist/ports/outcome.js

@@ -4,6 +4,67 @@
  * Host attributes a monetary value to each agent run via its
  * domain-specific rules (config/outcomes.yaml in CC). The agent simply
  * calls recordOutcomeAsync after its tracker.finish() — fire-and-forget.
+ *
+ * OTel instrumentation: import { createTracedOutcomePort } to wrap any
+ * OutcomePort implementation with OpenTelemetry spans. Gracefully degrades
+ * to noop spans when no OTel SDK is installed.
+ */
+import { SpanStatusCode, trace } from "@opentelemetry/api";
+const PORT_TRACER = trace.getTracer("vauban-agent-sdk.ports", "0.1.0");
+// ─── Typed errors ─────────────────────────────────────────────────────────────
+/**
+ * Thrown when the outcome store write fails (DB connection lost, serialization
+ * error, or queue full). Since recordOutcomeAsync is fire-and-forget, this
+ * error is surfaced only when the implementation chooses to throw synchronously
+ * (e.g., during validation or when the write queue is persistently full).
+ */
+export class OutcomeWriteError extends Error {
+    cause;
+    runId;
+    constructor(message, runId, cause) {
+        super(message);
+        this.cause = cause;
+        this.name = "OutcomeWriteError";
+        this.runId = runId;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/**
+ * Wrap any OutcomePort implementation with OTel spans.
+ * The span captures the run id and agent_id as attributes.
+ * Gracefully degrades to noop spans when no OTel SDK is installed.
+ *
+ * Usage:
+ *   const raw: OutcomePort = buildPostgresOutcome(...);
+ *   const traced = createTracedOutcomePort(raw);
+ *   traced.recordOutcomeAsync({...}) // emits "outcome.recordOutcomeAsync" span
  */
-export {};
+export function createTracedOutcomePort(impl) {
+    return {
+        recordOutcomeAsync(run) {
+            PORT_TRACER.startActiveSpan("outcome.recordOutcomeAsync", {
+                attributes: {
+                    "outcome.run_id": run.id,
+                    "outcome.agent_id": run.agent_id,
+                    "vauban.port.name": "outcome",
+                },
+            }, (span) => {
+                try {
+                    impl.recordOutcomeAsync(run);
+                    span.setStatus({ code: SpanStatusCode.OK });
+                }
+                catch (err) {
+                    span.setStatus({
+                        code: SpanStatusCode.ERROR,
+                        message: err instanceof Error ? err.message : String(err),
+                    });
+                    span.recordException(err);
+                }
+                finally {
+                    span.end();
+                }
+            });
+        },
+    };
+}
 //# sourceMappingURL=outcome.js.map

package/dist/ports/outcome.js.map

@@ -1 +1 @@
-{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../src/ports/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}
+{"version":3,"file":"outcome.js","sourceRoot":"","sources":["../../src/ports/outcome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;AAavE,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGkB;IAFnD,KAAK,CAAS;IAEvB,YAAY,OAAe,EAAE,KAAa,EAAkB,KAAe;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QAD2C,UAAK,GAAL,KAAK,CAAU;QAEzE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAUD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiB;IACvD,OAAO;QACL,kBAAkB,CAAC,GAAgB;YACjC,WAAW,CAAC,eAAe,CACzB,4BAA4B,EAC5B;gBACE,UAAU,EAAE;oBACV,gBAAgB,EAAE,GAAG,CAAC,EAAE;oBACxB,kBAAkB,EAAE,GAAG,CAAC,QAAQ;oBAChC,kBAAkB,EAAE,SAAS;iBAC9B;aACF,EACD,CAAC,IAAU,EAAE,EAAE;gBACb,IAAI,CAAC;oBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,cAAc,CAAC,KAAK;wBAC1B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC1D,CAAC,CAAC;oBACH,IAAI,CAAC,eAAe,CAAC,GAAY,CAAC,CAAC;gBACrC,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ports/privacy.contract.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PrivacyPort contract tests — validate V0 noop stub interface compliance.
+ *
+ * Tests verify:
+ * - applyMask returns input unchanged (identity function V0)
+ * - verifyZkProof always returns {valid: false, reason: 'noop_v0'}
+ * - commitToSmt returns deterministic mock root with correct structure
+ * - NoopPrivacyAdapter satisfies the PrivacyPort interface
+ * - All operations handle various context and commitment types
+ */
+export {};
+//# sourceMappingURL=privacy.contract.test.d.ts.map

package/dist/ports/privacy.contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.contract.test.d.ts","sourceRoot":"","sources":["../../src/ports/privacy.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/ports/privacy.contract.test.js

@@ -0,0 +1,325 @@
+/**
+ * PrivacyPort contract tests — validate V0 noop stub interface compliance.
+ *
+ * Tests verify:
+ * - applyMask returns input unchanged (identity function V0)
+ * - verifyZkProof always returns {valid: false, reason: 'noop_v0'}
+ * - commitToSmt returns deterministic mock root with correct structure
+ * - NoopPrivacyAdapter satisfies the PrivacyPort interface
+ * - All operations handle various context and commitment types
+ */
+import { describe, it, expect } from "vitest";
+import { NoopPrivacyAdapter, } from "./privacy";
+describe("PrivacyPort contract", () => {
+    describe("applyMask", () => {
+        it("returns input payload unchanged (V0 identity function)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { secret: "hidden", public: "visible", count: 42 };
+            const mask = {
+                public_fields: ["public"],
+                private_fields: ["secret"],
+            };
+            const ctx = { user_id: "user-1", tenant_id: "tenant-a" };
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+            expect(result).toBe(payload); // same reference (identity)
+        });
+        it("handles complex nested objects unchanged", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = {
+                user: {
+                    id: "u1",
+                    nested: {
+                        secret: "data",
+                        array: [1, 2, 3],
+                    },
+                },
+            };
+            const mask = {
+                public_fields: ["user.id"],
+                private_fields: ["user.nested.secret"],
+            };
+            const ctx = {};
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+        });
+        it("accepts conditional revelation masks", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { data: "value" };
+            const mask = {
+                public_fields: ["id"],
+                private_fields: ["secret"],
+                conditional: [
+                    {
+                        field: "email",
+                        condition: "user_role == 'admin'",
+                    },
+                ],
+            };
+            const ctx = { role: "admin" };
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+        });
+        it("handles various payload types (string, number, array, null)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const mask = {
+                public_fields: [],
+                private_fields: [],
+            };
+            const ctx = {};
+            const testCases = [
+                "string payload",
+                42,
+                3.14,
+                true,
+                [1, 2, 3],
+                null,
+                undefined,
+            ];
+            for (const payload of testCases) {
+                const result = await adapter.applyMask(payload, mask, ctx);
+                expect(result).toEqual(payload);
+            }
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { data: "test" };
+            const mask = {
+                public_fields: [],
+                private_fields: [],
+            };
+            const contexts = [
+                { user_id: "u1" },
+                { tenant_id: "t1", jurisdiction: "FR.v1" },
+                { role: "admin", user_id: "u2", metadata: { custom: "value" } },
+                {},
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.applyMask(payload, mask, ctx);
+                expect(result).toEqual(payload);
+            }
+        });
+    });
+    describe("verifyZkProof", () => {
+        it("always returns invalid with 'noop_v0' reason", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: { some: "proof" },
+                public_inputs: { value: 42 },
+            };
+            const ctx = {};
+            const result = await adapter.verifyZkProof(proof, ctx);
+            expect(result.valid).toBe(false);
+            expect(result.reason).toBe("noop_v0");
+            expect(result.confidence).toBe(0);
+        });
+        it("handles various proof schemes (V0 ignores)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const schemes = ["stwo", "starknet_stone", "groth16", "plonk"];
+            for (const scheme of schemes) {
+                const proof = {
+                    proof_data: { scheme_data: "test" },
+                    public_inputs: {},
+                    scheme,
+                };
+                const result = await adapter.verifyZkProof(proof, {});
+                expect(result.valid).toBe(false);
+                expect(result.reason).toBe("noop_v0");
+            }
+        });
+        it("accepts empty public inputs", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: "opaque_bytes",
+                public_inputs: {},
+            };
+            const result = await adapter.verifyZkProof(proof, {});
+            expect(result.valid).toBe(false);
+            expect(result.reason).toBe("noop_v0");
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: "test",
+                public_inputs: { x: 1 },
+            };
+            const contexts = [
+                { user_id: "u1" },
+                { tenant_id: "t1", jurisdiction: "EU.v1" },
+                { role: "operator" },
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.verifyZkProof(proof, ctx);
+                expect(result.valid).toBe(false);
+            }
+        });
+    });
+    describe("commitToSmt", () => {
+        it("returns mock SMT root with correct structure", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test_value" };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.smt_root).toBeDefined();
+            expect(result.smt_root).toMatch(/^0x[0-9a-f]+$/);
+            expect(result.leaf_index).toBe(0);
+            expect(result.version).toBe(0);
+        });
+        it("returns deterministic root for same commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "deterministic" };
+            const ctx = {};
+            const result1 = await adapter.commitToSmt(commitment, ctx);
+            const result2 = await adapter.commitToSmt(commitment, ctx);
+            expect(result1.smt_root).toBe(result2.smt_root);
+        });
+        it("returns different root for different commitments", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = {};
+            const result1 = await adapter.commitToSmt({ value: "value1" }, ctx);
+            const result2 = await adapter.commitToSmt({ value: "value2" }, ctx);
+            expect(result1.smt_root).not.toBe(result2.smt_root);
+        });
+        it("respects explicit leaf_index from commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test", index: 42 };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.leaf_index).toBe(42);
+        });
+        it("defaults leaf_index to 0 when not specified", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test" };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.leaf_index).toBe(0);
+        });
+        it("accepts optional salt in commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = {
+                value: "secret",
+                salt: "random_salt_123",
+                index: 5,
+            };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.smt_root).toBeDefined();
+            expect(result.leaf_index).toBe(5);
+            expect(result.version).toBe(0);
+        });
+        it("handles various commitment value types", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = {};
+            const values = [
+                "string value",
+                42,
+                3.14,
+                true,
+                { nested: "object" },
+                [1, 2, 3],
+            ];
+            for (const value of values) {
+                const result = await adapter.commitToSmt({ value }, ctx);
+                expect(result.smt_root).toBeDefined();
+                expect(result.version).toBe(0);
+            }
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test" };
+            const contexts = [
+                { user_id: "u1", tenant_id: "t1" },
+                { jurisdiction: "CH.v1" },
+                { metadata: { custom: true } },
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.commitToSmt(commitment, ctx);
+                expect(result.smt_root).toBeDefined();
+            }
+        });
+    });
+    describe("NoopPrivacyAdapter interface compliance", () => {
+        it("satisfies PrivacyPort contract", () => {
+            const adapter = new NoopPrivacyAdapter();
+            expect(typeof adapter.applyMask).toBe("function");
+            expect(typeof adapter.verifyZkProof).toBe("function");
+            expect(typeof adapter.commitToSmt).toBe("function");
+        });
+        it("all async methods return Promise", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const maskResult = adapter.applyMask({}, { public_fields: [], private_fields: [] }, {});
+            const proofResult = adapter.verifyZkProof({ proof_data: "x", public_inputs: {} }, {});
+            const smtResult = adapter.commitToSmt({ value: "x" }, {});
+            expect(maskResult).toBeInstanceOf(Promise);
+            expect(proofResult).toBeInstanceOf(Promise);
+            expect(smtResult).toBeInstanceOf(Promise);
+            await maskResult;
+            await proofResult;
+            await smtResult;
+        });
+        it("methods work together in realistic flow", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = { user_id: "user-1", role: "admin" };
+            // Simulate a privacy-respecting workflow (V0: all no-ops)
+            const payload = { secret: "data", public: "info" };
+            const mask = {
+                public_fields: ["public"],
+                private_fields: ["secret"],
+            };
+            const masked = await adapter.applyMask(payload, mask, ctx);
+            expect(masked).toEqual(payload);
+            const commitment = { value: masked };
+            const smtResult = await adapter.commitToSmt(commitment, ctx);
+            expect(smtResult.smt_root).toBeDefined();
+            expect(smtResult.version).toBe(0);
+            const proof = {
+                proof_data: { root: smtResult.smt_root },
+                public_inputs: { commitment_hash: "hash" },
+            };
+            const verified = await adapter.verifyZkProof(proof, ctx);
+            expect(verified.valid).toBe(false);
+            expect(verified.reason).toBe("noop_v0");
+        });
+    });
+    describe("V0 noop semantics validation", () => {
+        it("demonstrates V0 identity semantics: applyMask is identity", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: f(x) = x for any x
+            const testValues = [
+                { a: 1, b: "secret" },
+                "plain text",
+                [1, 2, 3, "secret"],
+                { deeply: { nested: { secret: "data" } } },
+            ];
+            for (const value of testValues) {
+                const result = await adapter.applyMask(value, { public_fields: ["a"], private_fields: ["secret"] }, {});
+                expect(result).toBe(value); // exact same object
+            }
+        });
+        it("demonstrates V0 proof rejection: verifyZkProof always fails", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: verifyZkProof always returns invalid
+            const proofs = [
+                { proof_data: "valid_proof", public_inputs: {} },
+                { proof_data: null, public_inputs: { x: 1 } },
+                { proof_data: { complex: "structure" }, public_inputs: [] },
+            ];
+            for (const proof of proofs) {
+                const result = await adapter.verifyZkProof(proof, {});
+                expect(result.valid).toBe(false);
+                expect(result.reason).toBe("noop_v0");
+                expect(result.confidence).toBe(0);
+            }
+        });
+        it("demonstrates V0 mock SMT: deterministic but no crypto", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: deterministic + version 0
+            const c1 = await adapter.commitToSmt({ value: "test" }, {});
+            const c2 = await adapter.commitToSmt({ value: "test" }, {});
+            expect(c1.smt_root).toBe(c2.smt_root);
+            expect(c1.version).toBe(0);
+            expect(c2.version).toBe(0);
+        });
+    });
+});
+//# sourceMappingURL=privacy.contract.test.js.map

package/dist/ports/privacy.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.contract.test.js","sourceRoot":"","sources":["../../src/ports/privacy.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,GAKnB,MAAM,WAAW,CAAC;AAEnB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;gBACzB,cAAc,EAAE,CAAC,QAAQ,CAAC;aAC3B,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;YAEzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG;gBACd,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE;wBACN,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;qBACjB;iBACF;aACF,CAAC;YACF,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,SAAS,CAAC;gBAC1B,cAAc,EAAE,CAAC,oBAAoB,CAAC;aACvC,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,IAAI,CAAC;gBACrB,cAAc,EAAE,CAAC,QAAQ,CAAC;gBAC1B,WAAW,EAAE;oBACX;wBACE,KAAK,EAAE,OAAO;wBACd,SAAS,EAAE,sBAAsB;qBAClC;iBACF;aACF,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,EAAE;gBACjB,cAAc,EAAE,EAAE;aACnB,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,SAAS,GAAG;gBAChB,gBAAgB;gBAChB,EAAE;gBACF,IAAI;gBACJ,IAAI;gBACJ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACT,IAAI;gBACJ,SAAS;aACV,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,EAAE;gBACjB,cAAc,EAAE,EAAE;aACnB,CAAC;YAEF,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE;gBACjB,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE;gBAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBAC/D,EAAE;aACH,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC7B,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aAC7B,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAiB;oBAC1B,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;oBACnC,aAAa,EAAE,EAAE;oBACjB,MAAM;iBACP,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAEtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,EAAE;aAClB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,MAAM;gBAClB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;aACxB,CAAC;YAEF,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE;gBACjB,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE;gBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE;aACrB,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACvD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;YAEpE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe;gBAC7B,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,CAAC;aACT,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG;gBACb,cAAc;gBACd,EAAE;gBACF,IAAI;gBACJ,IAAI;gBACJ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACpB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;aACV,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAEjD,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;gBAClC,EAAE,YAAY,EAAE,OAAO,EAAE;gBACzB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;aAC/B,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,MAAM,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAClC,EAAE,EACF,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EACzC,EAAE,CACH,CAAC;YACF,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CACvC,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,EACtC,EAAE,CACH,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAE1D,MAAM,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,UAAU,CAAC;YACjB,MAAM,WAAW,CAAC;YAClB,MAAM,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAEjE,0DAA0D;YAC1D,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;gBACzB,cAAc,EAAE,CAAC,QAAQ,CAAC;aAC3B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACxC,aAAa,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;aAC3C,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,mCAAmC;YACnC,MAAM,UAAU,GAAG;gBACjB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE;gBACrB,YAAY;gBACZ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;gBACnB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;aAC3C,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CACpC,KAAK,EACL,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,EACpD,EAAE,CACH,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,qDAAqD;YACrD,MAAM,MAAM,GAAG;gBACb,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE;gBAChD,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC7C,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;aAC5D,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC;gBACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,0CAA0C;YAC1C,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAE5D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ports/privacy.d.ts

@@ -0,0 +1,132 @@
+/**
+ * PrivacyPort — V0 noop stub for Vauban Privacy Protocol (VPP) integration.
+ *
+ * Implements S0 port #10 (PrivacyPort): placeholder interface for privacy-preserving
+ * operations. Phase 2+ will implement full Stwo+ML-KEM+viewing-key+SMT+cross-domain
+ * functionality per draft-vauban-privacy-protocol-00 (target IETF submission 2026-06-29,
+ * sprint-490 active 78%).
+ *
+ * V0 design: all operations return identity or noop stubs. Enables code to pass type
+ * checks while VPP integration is deferred. No Side effects, no cryptographic guarantees.
+ *
+ * Reference: S0 § cross-spec invariants X-1 (isolation), X-3 (crypto-shredding);
+ * VPP Phase roadmap: draft-vauban-privacy-protocol-00 + integration plan TBD.
+ */
+/**
+ * RevelationMask — declarative specification of which fields should be exposed
+ * during a privacy-respecting operation.
+ */
+export interface RevelationMask {
+    readonly public_fields: string[];
+    readonly private_fields: string[];
+    readonly conditional?: Array<{
+        readonly field: string;
+        readonly condition: string;
+    }>;
+}
+export interface ZkProofInput {
+    readonly proof_data: unknown;
+    readonly public_inputs: unknown;
+    readonly scheme?: string;
+}
+export interface VerifyResult {
+    readonly valid: boolean;
+    readonly reason?: string;
+    readonly confidence?: number;
+}
+export interface Commitment {
+    readonly value: unknown;
+    readonly salt?: string;
+    readonly index?: number;
+}
+export interface SmtResult {
+    readonly smt_root: string;
+    readonly leaf_index: number;
+    readonly version: number;
+    readonly proof?: unknown;
+}
+export interface PrivacyContext {
+    readonly user_id?: string;
+    readonly tenant_id?: string;
+    readonly role?: string;
+    readonly jurisdiction?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * PrivacyPort — V0 noop stub.
+ *
+ * All methods return identity values or noop results. Replaced by full VPP
+ * implementation in Phase 2 (Stwo+ML-KEM+viewing-key+SMT+cross-domain).
+ *
+ * Usage:
+ *   const priv = new NoopPrivacyAdapter();
+ *   const revealed = await priv.applyMask(data, mask, ctx); // data unchanged V0
+ *   const vk = await priv.verifyZkProof(proof, ctx); // {valid: false, reason: 'noop_v0'}
+ */
+export interface PrivacyPort {
+    /**
+     * Apply a revelation mask to payload (V0: returns payload unchanged).
+     *
+     * Phase 2+: will implement field-level hiding via ZK commitments or viewing keys.
+     *
+     * @param payload input object or data structure
+     * @param mask specification of which fields are public/private/conditional
+     * @param ctx privacy context (user, tenant, role, jurisdiction)
+     * @returns masked payload (V0: unchanged)
+     */
+    applyMask(payload: unknown, mask: RevelationMask, ctx: PrivacyContext): Promise<unknown>;
+    /**
+     * Verify a zero-knowledge proof (V0: always returns invalid with 'noop_v0' reason).
+     *
+     * Phase 2+: will implement Stwo proof verification against public inputs.
+     *
+     * @param proof ZK proof object (scheme TBD, likely Stwo)
+     * @param ctx privacy context
+     * @returns { valid: false, reason: 'noop_v0' } in V0
+     */
+    verifyZkProof(proof: ZkProofInput, ctx: PrivacyContext): Promise<VerifyResult>;
+    /**
+     * Commit value to sparse merkle tree (V0: returns deterministic mock root).
+     *
+     * Phase 2+: will implement full SMT with Poseidon hashing and viewing keys.
+     *
+     * @param commitment value or hash to commit
+     * @param ctx privacy context
+     * @returns mock SMT root (V0: deterministic, no cryptographic guarantee)
+     */
+    commitToSmt(commitment: Commitment, ctx: PrivacyContext): Promise<SmtResult>;
+}
+/**
+ * NoopPrivacyAdapter — V0 stub implementation of PrivacyPort.
+ *
+ * All methods return identity values or noop results. Enables type-safe code
+ * while VPP integration is deferred to Phase 2.
+ *
+ * Documentation: "V0 stub — replaced by VPP integration in Phase 2
+ * (Stwo+ML-KEM+viewing key+SMT+cross-domain)."
+ *
+ * Usage:
+ *   const adapter = new NoopPrivacyAdapter();
+ *   const data = { secret: 'hidden', public: 'visible' };
+ *   const masked = await adapter.applyMask(data, mask, ctx);
+ *   // masked === data (unchanged in V0)
+ */
+export declare class NoopPrivacyAdapter implements PrivacyPort {
+    applyMask(payload: unknown, _mask: RevelationMask, _ctx: PrivacyContext): Promise<unknown>;
+    verifyZkProof(_proof: ZkProofInput, _ctx: PrivacyContext): Promise<VerifyResult>;
+    commitToSmt(commitment: Commitment, _ctx: PrivacyContext): Promise<SmtResult>;
+    /**
+     * Compute a deterministic mock SMT root (V0 only).
+     * Purely for testing — no cryptographic guarantee.
+     */
+    private computeMockRoot;
+}
+/**
+ * PrivacyNoopWarning — logged when V0 noop operations are used.
+ * Not thrown as an exception (non-blocking), but logged for observability.
+ */
+export declare class PrivacyNoopWarning extends Error {
+    readonly operation: string;
+    constructor(message: string, operation: string);
+}
+//# sourceMappingURL=privacy.d.ts.map

package/dist/ports/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/ports/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;CACJ;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;OASG;IACH,SAAS,CACP,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;;;;;OAQG;IACH,aAAa,CACX,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB;;;;;;;;OAQG;IACH,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAC9E;AAID;;;;;;;;;;;;;;GAcG;AACH,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,SAAS,CACb,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,OAAO,CAAC;IAKb,aAAa,CACjB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC;IASlB,WAAW,CACf,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,SAAS,CAAC;IAWrB;;;OAGG;IACH,OAAO,CAAC,eAAe;CAUxB;AAID;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aACE,SAAS,EAAE,MAAM;gBAAlD,OAAO,EAAE,MAAM,EAAkB,SAAS,EAAE,MAAM;CAK/D"}