@vauban-org/agent-sdk 1.0.0 → 1.2.0

package/dist/orchestration/ooda/skills.d.ts

@@ -14,6 +14,66 @@
  */
 import type { DbClient } from "../../tracking/agent-run-tracker.js";
 import type { LoggerPort } from "../../ports/logger.js";
+/**
+ * Secrets access surface handed to skills. Implementations MUST track every
+ * lookup in `accessedSecrets` so callers can audit which secrets a skill
+ * actually consumed (required for ADR-ECO-027 proof-grade tripartite and
+ * future VPSF skill attestations).
+ *
+ * @public @since 1.2.0
+ */
+export interface SecretsAccessor {
+    /**
+     * Get a secret by name. Returns `defaultValue` if missing and provided;
+     * otherwise throws when `defaultValue` is undefined and the secret is
+     * not configured. Implementations MUST record the lookup in
+     * {@link accessedSecrets} regardless of outcome.
+     */
+    get(name: string, defaultValue?: string): string;
+    /** Whether a secret with this name is available. Counts as access. */
+    has(name: string): boolean;
+    /** Set of secret names the skill actually consulted during this invocation. */
+    readonly accessedSecrets: ReadonlySet<string>;
+}
+/**
+ * Error thrown by {@link InMemorySecretsAccessor} when a secret is requested
+ * without a default value and is not configured.
+ *
+ * @public @since 1.2.0
+ */
+export declare class SecretNotFoundError extends Error {
+    readonly secretName: string;
+    constructor(secretName: string);
+}
+/**
+ * In-memory {@link SecretsAccessor} suitable for tests and ephemeral
+ * runtimes. Production hosts can implement their own accessor backed by
+ * Vault, SOPS, or k8s SealedSecrets while preserving the audit semantics.
+ *
+ * @public @since 1.2.0
+ */
+export declare class InMemorySecretsAccessor implements SecretsAccessor {
+    private readonly store;
+    private readonly accessed;
+    constructor(secrets?: Readonly<Record<string, string>>);
+    get(name: string, defaultValue?: string): string;
+    has(name: string): boolean;
+    get accessedSecrets(): ReadonlySet<string>;
+}
+/**
+ * Noop accessor — used as default for skills that declare no secrets.
+ * Always returns `defaultValue` when provided, otherwise throws.
+ *
+ * @public @since 1.2.0
+ */
+export declare const NOOP_SECRETS: SecretsAccessor;
+/**
+ * Progress callback invoked by skills via `ctx.progress(value, message?)`.
+ * `value` is clamped into `[0, 1]` by implementations.
+ *
+ * @public @since 1.2.0
+ */
+export type ProgressCallback = (value: number, message?: string) => void;
 /**
  * Context handed to each skill invocation.
  *
@@ -21,13 +81,57 @@ import type { LoggerPort } from "../../ports/logger.js";
  * the skill must short-circuit and emit no observable mutation (no LLM
  * call, no HTTP, no DB INSERT). This guarantees replay safety for the
  * OODA cycle log.
+ *
+ * Fields added in SDK v1.2.0 (executionId, secrets, progress,
+ * elapsedSeconds, remainingSeconds) are OPTIONAL by design — existing
+ * skills compile unchanged. New skills can opt in via the
+ * {@link createSkillContext} factory.
  */
 export interface SkillContext {
     readonly isReplay: boolean;
     readonly dryRunMocks: Record<string, (input: unknown) => unknown>;
     readonly db: DbClient;
     readonly logger: LoggerPort;
+    /** Unique invocation identifier. Optional for backwards compatibility. */
+    readonly executionId?: string;
+    /** Audit-trail-bearing secret access. Defaults to {@link NOOP_SECRETS}. */
+    readonly secrets?: SecretsAccessor;
+    /** Report execution progress in [0, 1]. Noop when absent. */
+    readonly progress?: ProgressCallback;
+    /** Seconds since invocation began. Returns 0 when not tracked. */
+    readonly elapsedSeconds?: number;
+    /** Seconds remaining until timeout. Returns +Infinity when not tracked. */
+    readonly remainingSeconds?: number;
+}
+/**
+ * Options for {@link createSkillContext}.
+ *
+ * @public @since 1.2.0
+ */
+export interface CreateSkillContextOptions {
+    isReplay?: boolean;
+    dryRunMocks?: Record<string, (input: unknown) => unknown>;
+    db: DbClient;
+    logger: LoggerPort;
+    executionId?: string;
+    secrets?: SecretsAccessor;
+    progress?: ProgressCallback;
+    /** Absolute timeout in seconds; used to compute remainingSeconds. Default: +Infinity. */
+    timeoutSeconds?: number;
+    /** Reference Date for elapsed/remaining computation. Default: new Date(). */
+    startedAt?: Date;
 }
+/**
+ * Build a {@link SkillContext} with sane defaults for the optional fields.
+ * Useful for hosts that want a uniform context without writing the boilerplate.
+ *
+ * Time accessors are LIVE — `elapsedSeconds` and `remainingSeconds` are
+ * recomputed on each property read, so a skill that loops can observe them
+ * decreasing without rebuilding the context.
+ *
+ * @public @since 1.2.0
+ */
+export declare function createSkillContext(opts: CreateSkillContextOptions): SkillContext;
 /**
  * Skill — single named callable unit invoked from an OODA phase.
  *

package/dist/orchestration/ooda/skills.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,CAAC,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAAiC,CAAC"}
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../../src/orchestration/ooda/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACjD,sEAAsE;IACtE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,UAAU,EAAE,MAAM;CAK/B;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;gBAEvC,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM;IAI1D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM;IAQhD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAK1B,IAAI,eAAe,IAAI,WAAW,CAAC,MAAM,CAAC,CAEzC;CACF;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,eAA+C,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC;IAC1D,EAAE,EAAE,QAAQ,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,yBAAyB,GAC9B,YAAY,CAkCd;AAWD;;;;;;GAMG;AACH,MAAM,WAAW,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE;QAAE,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,CAAC,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAAiC,CAAC"}

package/dist/orchestration/ooda/skills.js

@@ -12,6 +12,112 @@
  *
  * @public
  */
+/**
+ * Error thrown by {@link InMemorySecretsAccessor} when a secret is requested
+ * without a default value and is not configured.
+ *
+ * @public @since 1.2.0
+ */
+export class SecretNotFoundError extends Error {
+    secretName;
+    constructor(secretName) {
+        super(`secret '${secretName}' is not configured`);
+        this.name = "SecretNotFoundError";
+        this.secretName = secretName;
+    }
+}
+/**
+ * In-memory {@link SecretsAccessor} suitable for tests and ephemeral
+ * runtimes. Production hosts can implement their own accessor backed by
+ * Vault, SOPS, or k8s SealedSecrets while preserving the audit semantics.
+ *
+ * @public @since 1.2.0
+ */
+export class InMemorySecretsAccessor {
+    store;
+    accessed = new Set();
+    constructor(secrets = {}) {
+        this.store = new Map(Object.entries(secrets));
+    }
+    get(name, defaultValue) {
+        this.accessed.add(name);
+        const value = this.store.get(name);
+        if (value !== undefined)
+            return value;
+        if (defaultValue !== undefined)
+            return defaultValue;
+        throw new SecretNotFoundError(name);
+    }
+    has(name) {
+        this.accessed.add(name);
+        return this.store.has(name);
+    }
+    get accessedSecrets() {
+        return this.accessed;
+    }
+}
+/**
+ * Noop accessor — used as default for skills that declare no secrets.
+ * Always returns `defaultValue` when provided, otherwise throws.
+ *
+ * @public @since 1.2.0
+ */
+export const NOOP_SECRETS = new InMemorySecretsAccessor();
+/**
+ * Build a {@link SkillContext} with sane defaults for the optional fields.
+ * Useful for hosts that want a uniform context without writing the boilerplate.
+ *
+ * Time accessors are LIVE — `elapsedSeconds` and `remainingSeconds` are
+ * recomputed on each property read, so a skill that loops can observe them
+ * decreasing without rebuilding the context.
+ *
+ * @public @since 1.2.0
+ */
+export function createSkillContext(opts) {
+    const startedAt = opts.startedAt ?? new Date();
+    const timeoutSeconds = opts.timeoutSeconds ?? Number.POSITIVE_INFINITY;
+    const secrets = opts.secrets ?? NOOP_SECRETS;
+    const progressFn = opts.progress ?? noopProgress;
+    const ctx = {
+        isReplay: opts.isReplay ?? false,
+        dryRunMocks: opts.dryRunMocks ?? {},
+        db: opts.db,
+        logger: opts.logger,
+        secrets,
+        progress: (value, message) => {
+            const clamped = clampProgress(value);
+            progressFn(clamped, message);
+        },
+        get elapsedSeconds() {
+            return Math.max(0, (Date.now() - startedAt.getTime()) / 1000);
+        },
+        get remainingSeconds() {
+            if (!Number.isFinite(timeoutSeconds))
+                return Number.POSITIVE_INFINITY;
+            const elapsed = (Date.now() - startedAt.getTime()) / 1000;
+            return Math.max(0, timeoutSeconds - elapsed);
+        },
+    };
+    if (opts.executionId !== undefined) {
+        Object.defineProperty(ctx, "executionId", {
+            value: opts.executionId,
+            writable: false,
+            enumerable: true,
+            configurable: false,
+        });
+    }
+    return ctx;
+}
+function clampProgress(value) {
+    if (!Number.isFinite(value))
+        return 0;
+    if (value < 0)
+        return 0;
+    if (value > 1)
+        return 1;
+    return value;
+}
+const noopProgress = () => { };
 /**
  * Empty registry — convenience for tests and minimal agents.
  */

package/dist/orchestration/ooda/skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2CH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../src/orchestration/ooda/skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA2BH;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,UAAU,CAAS;IAC5B,YAAY,UAAkB;QAC5B,KAAK,CAAC,WAAW,UAAU,qBAAqB,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACjB,KAAK,CAA8B;IACnC,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEnD,YAAY,UAA4C,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,YAAqB;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,YAAY,CAAC;QACpD,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAoB,IAAI,uBAAuB,EAAE,CAAC;AA2D3E;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA+B;IAE/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;IAEjD,MAAM,GAAG,GAAiB;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO;QACP,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACrC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,cAAc;YAChB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,gBAAgB;YAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;YACtE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;YAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,aAAa,EAAE;YACxC,KAAK,EAAE,IAAI,CAAC,WAAW;YACvB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,YAAY,GAAqB,GAAG,EAAE,GAAE,CAAC,CAAC;AAyBhD;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC"}

package/dist/ports/bastion-action.contract.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * BastionActionPort contract tests.
+ *
+ * Applied to any BastionActionPort implementation. Tests T-E invariant validation,
+ * error handling, and policy constraint enforcement.
+ *
+ * Source: MASTER-PLAN-v5.md §1.3.1 (T-E manifest ∩ client_policies)
+ */
+import { type BastionActionPort } from "./bastion-action.js";
+export declare const bastionActionPortContract: (factory: () => BastionActionPort) => void;
+//# sourceMappingURL=bastion-action.contract.test.d.ts.map

package/dist/ports/bastion-action.contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bastion-action.contract.test.d.ts","sourceRoot":"","sources":["../../src/ports/bastion-action.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAIL,KAAK,iBAAiB,EAcvB,MAAM,qBAAqB,CAAC;AAmC7B,eAAO,MAAM,yBAAyB,GAAI,SAAS,MAAM,iBAAiB,SA6JzE,CAAC"}

package/dist/ports/bastion-action.contract.test.js

@@ -0,0 +1,238 @@
+/**
+ * BastionActionPort contract tests.
+ *
+ * Applied to any BastionActionPort implementation. Tests T-E invariant validation,
+ * error handling, and policy constraint enforcement.
+ *
+ * Source: MASTER-PLAN-v5.md §1.3.1 (T-E manifest ∩ client_policies)
+ */
+import { describe, expect, test } from "vitest";
+import { BastionPolicyViolationError, BastionSlippageExceededError, BastionTransferUnauthorizedError, } from "./bastion-action.js";
+function makeActionContext(overrides = {}) {
+    return {
+        tenantId: "tenant-001",
+        manifestHash: "abc123def456",
+        runId: crypto.randomUUID(),
+        ...overrides,
+    };
+}
+function makeSwapParams(overrides = {}) {
+    return {
+        token_in: "0xdeadbeef",
+        token_out: "0xcafebabe",
+        amount: "1000000000000000000", // 1e18
+        max_slippage_bps: 50, // 0.5%
+        deadline: Math.floor(Date.now() / 1000) + 3600,
+        ...overrides,
+    };
+}
+function makeTransferParams(overrides = {}) {
+    return {
+        recipient: "0x1234567890abcdef",
+        amount: "1000000",
+        token: "0xdeadbeef",
+        ...overrides,
+    };
+}
+export const bastionActionPortContract = (factory) => {
+    describe("BastionActionPort contract", () => {
+        test("swap succeeds within slippage tolerance", async () => {
+            const port = factory();
+            const params = makeSwapParams({ max_slippage_bps: 100 });
+            const ctx = makeActionContext();
+            // Validate passes first
+            const validation = await port.validateAgainstClientPolicies("swap", ctx.tenantId);
+            expect(validation.valid).toBe(true);
+            // Mock successful swap — implementation should not throw
+            const result = await port.swap(params, ctx);
+            expect(result.tx_hash).toBeDefined();
+            expect(result.actual_slippage_bps).toBeLessThanOrEqual(params.max_slippage_bps);
+        });
+        test("swap throws BastionSlippageExceededError when actual > max", async () => {
+            const port = factory();
+            const params = makeSwapParams({ max_slippage_bps: 10 }); // 0.1% max, will exceed
+            const ctx = makeActionContext();
+            await expect(port.swap(params, ctx)).rejects.toThrow(BastionSlippageExceededError);
+        });
+        test("transfer requires legalBasis in ctx", async () => {
+            const port = factory();
+            const params = makeTransferParams();
+            const ctx = makeActionContext({ legalBasis: undefined });
+            // Validate passes, but execution should fail without legalBasis
+            await expect(port.transfer(params, ctx)).rejects.toThrow(BastionTransferUnauthorizedError);
+        });
+        test("transfer succeeds with legalBasis (TFR Art 4)", async () => {
+            const port = factory();
+            const params = makeTransferParams();
+            const ctx = makeActionContext({ legalBasis: "tfr.art4" });
+            const result = await port.transfer(params, ctx);
+            expect(result.tx_hash).toBeDefined();
+            expect(result.recipient).toBe(params.recipient);
+            expect(result.amount).toBe(params.amount);
+        });
+        test("validateAgainstClientPolicies returns valid=false for out-of-scope actions", async () => {
+            const port = factory();
+            const tenantId = "restricted-tenant";
+            // Validate should block an action that's not in tenant's allowed_actions
+            const validation = await port.validateAgainstClientPolicies("swap", tenantId);
+            if (!validation.valid) {
+                expect(validation.violations.length).toBeGreaterThan(0);
+            }
+        });
+        test("validateAgainstClientPolicies enforces max_slippage_bps constraint", async () => {
+            const port = factory();
+            const tenantId = "tenant-001";
+            // Validate with slippage params that exceed policy
+            const params = makeSwapParams({ max_slippage_bps: 5000 }); // 50% (extreme)
+            const validation = await port.validateAgainstClientPolicies("swap", tenantId, params);
+            // Expected: violation if policy max < 5000 bps
+            if (!validation.valid) {
+                expect(validation.violations.some((v) => v.includes("slippage"))).toBe(true);
+            }
+        });
+        test("validateAgainstClientPolicies caches client_policies (TTL 60s)", async () => {
+            const port = factory();
+            const tenantId = "tenant-001";
+            // First call — cache miss, fetches policy
+            const validation1 = await port.validateAgainstClientPolicies("deposit", tenantId);
+            expect(validation1).toBeDefined();
+            // Second call immediately — should use cache, same policy_hash
+            const validation2 = await port.validateAgainstClientPolicies("deposit", tenantId);
+            if (validation1.policy_hash && validation2.policy_hash) {
+                expect(validation2.policy_hash).toBe(validation1.policy_hash);
+            }
+        });
+        test("deposit succeeds with valid params", async () => {
+            const port = factory();
+            const params = {
+                vault_address: "0xvault001",
+                amount: "1000000000000000000",
+                token: "0xdeadbeef",
+            };
+            const ctx = makeActionContext();
+            const validation = await port.validateAgainstClientPolicies("deposit", ctx.tenantId);
+            if (validation.valid) {
+                const result = await port.deposit(params, ctx);
+                expect(result.tx_hash).toBeDefined();
+                expect(result.shares_minted).toBeDefined();
+            }
+        });
+        test("withdraw succeeds with valid params", async () => {
+            const port = factory();
+            const params = {
+                vault_address: "0xvault001",
+                shares: "500000000000000000",
+            };
+            const ctx = makeActionContext();
+            const result = await port.withdraw(params, ctx);
+            expect(result.tx_hash).toBeDefined();
+            expect(result.amount_withdrawn).toBeDefined();
+        });
+        test("policy violation includes action and tenantId in error", async () => {
+            const port = factory();
+            const tenantId = "restricted-tenant";
+            try {
+                await port.validateAgainstClientPolicies("swap", tenantId);
+            }
+            catch (err) {
+                if (err instanceof BastionPolicyViolationError) {
+                    expect(err.action).toBe("swap");
+                    expect(err.tenantId).toBe(tenantId);
+                }
+            }
+        });
+    });
+};
+// ─── Mock implementation ──────────────────────────────────────────────────
+class MockBastionActionPort {
+    policyCache = new Map();
+    async validateAgainstClientPolicies(action, tenantId, params) {
+        // Simulate policy fetch with cache
+        const cached = this.policyCache.get(tenantId);
+        const now = Date.now();
+        const policy = cached && now - cached.ts < 60000
+            ? cached.policy
+            : this.getDefaultPolicy(tenantId);
+        if (policy) {
+            this.policyCache.set(tenantId, { policy, ts: now });
+        }
+        const violations = [];
+        // Check if action is allowed
+        if (!policy.allowed_actions.includes(action)) {
+            violations.push(`action '${action}' not in allowed_actions`);
+        }
+        // Check slippage constraint if params provided
+        if (params &&
+            "max_slippage_bps" in params &&
+            (params.max_slippage_bps ?? 0) > policy.max_slippage_bps) {
+            violations.push(`slippage ${params.max_slippage_bps} bps exceeds policy max ${policy.max_slippage_bps} bps`);
+        }
+        const valid = violations.length === 0;
+        return {
+            valid,
+            violations,
+            policy_hash: `hash-${tenantId}-${action}`,
+        };
+    }
+    getDefaultPolicy(tenantId) {
+        if (tenantId === "restricted-tenant") {
+            return {
+                max_slippage_bps: 100,
+                allowed_pairs: [],
+                daily_volume_cap: "0",
+                deposit_cap: "0",
+                allowed_actions: [],
+                cache_ttl_seconds: 60,
+            };
+        }
+        return {
+            max_slippage_bps: 500,
+            allowed_pairs: [
+                ["0xdeadbeef", "0xcafebabe"],
+            ],
+            daily_volume_cap: "1000000000000000000000",
+            deposit_cap: "500000000000000000000",
+            allowed_actions: ["swap", "deposit", "withdraw", "transfer"],
+            cache_ttl_seconds: 60,
+        };
+    }
+    async swap(params, _ctx) {
+        // Simulate slippage calculation: if max_slippage_bps is very low, exceed it
+        const actualSlippageBps = params.max_slippage_bps < 20 ? 50 : 10;
+        if (actualSlippageBps > params.max_slippage_bps) {
+            throw new BastionSlippageExceededError(params.max_slippage_bps, actualSlippageBps);
+        }
+        return {
+            tx_hash: `0x${crypto.randomUUID().replace(/-/g, "")}`,
+            amount_out: (BigInt(params.amount) * BigInt(99)) / BigInt(100),
+            actual_slippage_bps: actualSlippageBps,
+            executed_at: new Date(),
+        };
+    }
+    async deposit(params, _ctx) {
+        return {
+            tx_hash: `0x${crypto.randomUUID().replace(/-/g, "")}`,
+            shares_minted: (BigInt(params.amount) * BigInt(95)) / BigInt(100),
+            deposit_amount: params.amount,
+        };
+    }
+    async withdraw(params, _ctx) {
+        return {
+            tx_hash: `0x${crypto.randomUUID().replace(/-/g, "")}`,
+            amount_withdrawn: (BigInt(params.shares) * BigInt(98)) / BigInt(100),
+        };
+    }
+    async transfer(params, ctx) {
+        if (!ctx.legalBasis) {
+            throw new BastionTransferUnauthorizedError("Transfer requires legalBasis (TFR Art 4)", "missing_legal_basis");
+        }
+        return {
+            tx_hash: `0x${crypto.randomUUID().replace(/-/g, "")}`,
+            recipient: params.recipient,
+            amount: params.amount,
+        };
+    }
+}
+// ─── Default contract application ──────────────────────────────────────────
+bastionActionPortContract(() => new MockBastionActionPort());
+//# sourceMappingURL=bastion-action.contract.test.js.map

package/dist/ports/bastion-action.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bastion-action.contract.test.js","sourceRoot":"","sources":["../../src/ports/bastion-action.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,GAejC,MAAM,qBAAqB,CAAC;AAE7B,SAAS,iBAAiB,CACxB,YAAoC,EAAE;IAEtC,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,YAAY,EAAE,cAAc;QAC5B,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QAC1B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,YAAiC,EAAE;IACzD,OAAO;QACL,QAAQ,EAAE,YAAmB;QAC7B,SAAS,EAAE,YAAmB;QAC9B,MAAM,EAAE,qBAAqB,EAAE,OAAO;QACtC,gBAAgB,EAAE,EAAE,EAAE,OAAO;QAC7B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;QAC9C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,YAAqC,EAAE;IAEvC,OAAO;QACL,SAAS,EAAE,oBAAoB;QAC/B,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,YAAmB;QAC1B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAgC,EAAE,EAAE;IAC5E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;YAEhC,wBAAwB;YACxB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,6BAA6B,CACzD,MAAM,EACN,GAAG,CAAC,QAAQ,CACb,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpC,yDAAyD;YACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,mBAAmB,CACpD,MAAM,CAAC,gBAAgB,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;YACjF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;YAEhC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAClD,4BAA4B,CAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAEzD,gEAAgE;YAChE,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtD,gCAAgC,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;YAC5F,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC;YAErC,yEAAyE;YACzE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,6BAA6B,CACzD,MAAM,EACN,QAAQ,CACT,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,YAAY,CAAC;YAE9B,mDAAmD;YACnD,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB;YAC3E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,6BAA6B,CACzD,MAAM,EACN,QAAQ,EACR,MAAM,CACP,CAAC;YAEF,+CAA+C;YAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,YAAY,CAAC;YAE9B,0CAA0C;YAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC1D,SAAS,EACT,QAAQ,CACT,CAAC;YACF,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAElC,+DAA+D;YAC/D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAC1D,SAAS,EACT,QAAQ,CACT,CAAC;YACF,IAAI,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACvD,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,YAAmB;gBAClC,MAAM,EAAE,qBAAqB;gBAC7B,KAAK,EAAE,YAAmB;aAC3B,CAAC;YACF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;YAEhC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,6BAA6B,CACzD,SAAS,EACT,GAAG,CAAC,QAAQ,CACb,CAAC;YACF,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,YAAmB;gBAClC,MAAM,EAAE,oBAAoB;aAC7B,CAAC;YACF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;YAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC;YAErC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,6BAA6B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;oBAC/C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,6EAA6E;AAE7E,MAAM,qBAAqB;IACjB,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAC;IAE9E,KAAK,CAAC,6BAA6B,CACjC,MAAoD,EACpD,QAAkB,EAClB,MAA4C;QAE5C,mCAAmC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GACV,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,KAAK;YAC/B,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,6BAA6B;QAC7B,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,0BAA0B,CAAC,CAAC;QAC/D,CAAC;QAED,+CAA+C;QAC/C,IACE,MAAM;YACN,kBAAkB,IAAI,MAAM;YAC5B,CAAE,MAAqB,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,EACxE,CAAC;YACD,UAAU,CAAC,IAAI,CACb,YAAY,MAAM,CAAC,gBAAgB,2BAA2B,MAAM,CAAC,gBAAgB,MAAM,CAC5F,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QACtC,OAAO;YACL,KAAK;YACL,UAAU;YACV,WAAW,EAAE,QAAQ,QAAQ,IAAI,MAAM,EAAE;SAC1C,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,QAAkB;QACzC,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACrC,OAAO;gBACL,gBAAgB,EAAE,GAAG;gBACrB,aAAa,EAAE,EAAE;gBACjB,gBAAgB,EAAE,GAAG;gBACrB,WAAW,EAAE,GAAG;gBAChB,eAAe,EAAE,EAAE;gBACnB,iBAAiB,EAAE,EAAE;aACtB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,gBAAgB,EAAE,GAAG;YACrB,aAAa,EAAE;gBACb,CAAC,YAA4B,EAAE,YAA4B,CAAC;aAC7D;YACD,gBAAgB,EAAE,wBAAwB;YAC1C,WAAW,EAAE,uBAAuB;YACpC,eAAe,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC;YAC5D,iBAAiB,EAAE,EAAE;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB,EAAE,IAAmB;QAChD,4EAA4E;QAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjE,IAAI,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,4BAA4B,CACpC,MAAM,CAAC,gBAAgB,EACvB,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YACrD,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;YAC9D,mBAAmB,EAAE,iBAAiB;YACtC,WAAW,EAAE,IAAI,IAAI,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAqB,EACrB,IAAmB;QAEnB,OAAO;YACL,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YACrD,aAAa,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;YACjE,cAAc,EAAE,MAAM,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAAsB,EACtB,IAAmB;QAEnB,OAAO;YACL,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YACrD,gBAAgB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAAsB,EACtB,GAAkB;QAElB,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,gCAAgC,CACxC,0CAA0C,EAC1C,qBAAqB,CACtB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE;YACrD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAE9E,yBAAyB,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC"}

package/dist/ports/bastion-action.d.ts

@@ -0,0 +1,133 @@
+/**
+ * BastionActionPort — host adapter for Bastion DeFi capabilities.
+ *
+ * Implements the manifest ∩ client_policies validation gate (T-E invariant).
+ * All actions must pass through validateAgainstClientPolicies before HTTP execution.
+ *
+ * Source: MASTER-PLAN-v5.md §1.3.1, §2.3 (Q-Bastion-1..4)
+ */
+export type TokenAddress = string & {
+    readonly __brand: "TokenAddress";
+};
+export type VaultAddress = string & {
+    readonly __brand: "VaultAddress";
+};
+export type TenantId = string;
+export interface SwapParams {
+    readonly token_in: TokenAddress;
+    readonly token_out: TokenAddress;
+    readonly amount: string;
+    readonly max_slippage_bps: number;
+    readonly deadline: number;
+}
+export interface DepositParams {
+    readonly vault_address: VaultAddress;
+    readonly amount: string;
+    readonly token: TokenAddress;
+}
+export interface WithdrawParams {
+    readonly vault_address: VaultAddress;
+    readonly shares: string;
+}
+export interface TransferParams {
+    readonly recipient: string;
+    readonly amount: string;
+    readonly token: TokenAddress;
+}
+export interface ActionContext {
+    readonly tenantId: TenantId;
+    readonly manifestHash: string;
+    readonly runId: string;
+    readonly legalBasis?: string;
+    readonly jurisdictionsContext?: string[];
+}
+export interface SwapResult {
+    readonly tx_hash: string;
+    readonly amount_out: string;
+    readonly actual_slippage_bps: number;
+    readonly executed_at: Date;
+}
+export interface DepositResult {
+    readonly tx_hash: string;
+    readonly shares_minted: string;
+    readonly deposit_amount: string;
+}
+export interface WithdrawResult {
+    readonly tx_hash: string;
+    readonly amount_withdrawn: string;
+}
+export interface TransferResult {
+    readonly tx_hash: string;
+    readonly recipient: string;
+    readonly amount: string;
+}
+export interface ClientPolicy {
+    readonly max_slippage_bps: number;
+    readonly allowed_pairs: readonly [TokenAddress, TokenAddress][];
+    readonly daily_volume_cap: string;
+    readonly deposit_cap: string;
+    readonly allowed_actions: readonly ("swap" | "deposit" | "withdraw" | "transfer")[];
+    readonly cache_ttl_seconds: number;
+}
+export interface PolicyValidation {
+    readonly valid: boolean;
+    readonly violations: readonly string[];
+    readonly policy_hash?: string;
+}
+export interface BastionActionPort {
+    /**
+     * Swap tokens on Bastion CoW intents.
+     * Throws BastionSlippageExceededError if actual slippage > max_slippage_bps.
+     */
+    swap(params: SwapParams, ctx: ActionContext): Promise<SwapResult>;
+    /**
+     * Deposit into a Bastion vault.
+     * Throws BastionInsufficientFundsError if user balance < amount.
+     */
+    deposit(params: DepositParams, ctx: ActionContext): Promise<DepositResult>;
+    /**
+     * Withdraw shares from a Bastion vault.
+     */
+    withdraw(params: WithdrawParams, ctx: ActionContext): Promise<WithdrawResult>;
+    /**
+     * Transfer tokens. Requires legalBasis in ctx per TFR Art 4.
+     * Throws BastionTransferUnauthorizedError if legalBasis absent.
+     */
+    transfer(params: TransferParams, ctx: ActionContext): Promise<TransferResult>;
+    /**
+     * Validate action against manifest ∩ client_policies intersection (T-E invariant).
+     * Caches client_policies for tenant TTL 60s; invalidation event-driven.
+     * Throws BastionPolicyViolationError if action ∉ intersection.
+     */
+    validateAgainstClientPolicies(action: "swap" | "deposit" | "withdraw" | "transfer", tenantId: TenantId, params?: Partial<SwapParams & DepositParams>): Promise<PolicyValidation>;
+}
+export declare class BastionPolicyViolationError extends Error {
+    readonly action: string;
+    readonly tenantId: TenantId;
+    readonly cause?: unknown | undefined;
+    constructor(message: string, action: string, tenantId: TenantId, cause?: unknown | undefined);
+}
+export declare class BastionInsufficientFundsError extends Error {
+    readonly required: string;
+    readonly available: string;
+    readonly cause?: unknown | undefined;
+    constructor(required: string, available: string, cause?: unknown | undefined);
+}
+export declare class BastionSlippageExceededError extends Error {
+    readonly max_slippage_bps: number;
+    readonly actual_slippage_bps: number;
+    readonly cause?: unknown | undefined;
+    constructor(max_slippage_bps: number, actual_slippage_bps: number, cause?: unknown | undefined);
+}
+export declare class BastionContractError extends Error {
+    readonly contract_call: string;
+    readonly contract_error: string;
+    readonly cause?: unknown | undefined;
+    constructor(contract_call: string, contract_error: string, cause?: unknown | undefined);
+}
+export declare class BastionTransferUnauthorizedError extends Error {
+    readonly reason: "missing_legal_basis" | "jurisdiction_blocked";
+    readonly cause?: unknown | undefined;
+    constructor(message: string, reason: "missing_legal_basis" | "jurisdiction_blocked", cause?: unknown | undefined);
+}
+//# sourceMappingURL=bastion-action.d.ts.map

package/dist/ports/bastion-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bastion-action.d.ts","sourceRoot":"","sources":["../../src/ports/bastion-action.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AACzE,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1C;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;IAChE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,SAAS,CAC/B,MAAM,GACN,SAAS,GACT,UAAU,GACV,UAAU,CACb,EAAE,CAAC;IACJ,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAID,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3E;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE9E;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAE9E;;;;OAIG;IACH,6BAA6B,CAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,EACpD,QAAQ,EAAE,QAAQ,EAClB,MAAM,CAAC,EAAE,OAAO,CAAC,UAAU,GAAG,aAAa,CAAC,GAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAID,qBAAa,2BAA4B,SAAQ,KAAK;aAGlC,MAAM,EAAE,MAAM;aACd,QAAQ,EAAE,QAAQ;aAClB,KAAK,CAAC,EAAE,OAAO;gBAH/B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAEpC,QAAQ,EAAE,MAAM;aAChB,SAAS,EAAE,MAAM;aACjB,KAAK,CAAC,EAAE,OAAO;gBAFf,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,gBAAgB,EAAE,MAAM;aACxB,mBAAmB,EAAE,MAAM;aAC3B,KAAK,CAAC,EAAE,OAAO;gBAFf,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,MAAM,EAC3B,KAAK,CAAC,EAAE,OAAO,YAAA;CAQlC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,aAAa,EAAE,MAAM;aACrB,cAAc,EAAE,MAAM;aACtB,KAAK,CAAC,EAAE,OAAO;gBAFf,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;aAGvC,MAAM,EAAE,qBAAqB,GAAG,sBAAsB;aACtD,KAAK,CAAC,EAAE,OAAO;gBAF/B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,qBAAqB,GAAG,sBAAsB,EACtD,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC"}