@vauban-org/agent-sdk 1.0.0 → 1.2.0

package/dist/ports/privacy.contract.test.js

@@ -0,0 +1,325 @@
+/**
+ * PrivacyPort contract tests — validate V0 noop stub interface compliance.
+ *
+ * Tests verify:
+ * - applyMask returns input unchanged (identity function V0)
+ * - verifyZkProof always returns {valid: false, reason: 'noop_v0'}
+ * - commitToSmt returns deterministic mock root with correct structure
+ * - NoopPrivacyAdapter satisfies the PrivacyPort interface
+ * - All operations handle various context and commitment types
+ */
+import { describe, it, expect } from "vitest";
+import { NoopPrivacyAdapter, } from "./privacy";
+describe("PrivacyPort contract", () => {
+    describe("applyMask", () => {
+        it("returns input payload unchanged (V0 identity function)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { secret: "hidden", public: "visible", count: 42 };
+            const mask = {
+                public_fields: ["public"],
+                private_fields: ["secret"],
+            };
+            const ctx = { user_id: "user-1", tenant_id: "tenant-a" };
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+            expect(result).toBe(payload); // same reference (identity)
+        });
+        it("handles complex nested objects unchanged", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = {
+                user: {
+                    id: "u1",
+                    nested: {
+                        secret: "data",
+                        array: [1, 2, 3],
+                    },
+                },
+            };
+            const mask = {
+                public_fields: ["user.id"],
+                private_fields: ["user.nested.secret"],
+            };
+            const ctx = {};
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+        });
+        it("accepts conditional revelation masks", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { data: "value" };
+            const mask = {
+                public_fields: ["id"],
+                private_fields: ["secret"],
+                conditional: [
+                    {
+                        field: "email",
+                        condition: "user_role == 'admin'",
+                    },
+                ],
+            };
+            const ctx = { role: "admin" };
+            const result = await adapter.applyMask(payload, mask, ctx);
+            expect(result).toEqual(payload);
+        });
+        it("handles various payload types (string, number, array, null)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const mask = {
+                public_fields: [],
+                private_fields: [],
+            };
+            const ctx = {};
+            const testCases = [
+                "string payload",
+                42,
+                3.14,
+                true,
+                [1, 2, 3],
+                null,
+                undefined,
+            ];
+            for (const payload of testCases) {
+                const result = await adapter.applyMask(payload, mask, ctx);
+                expect(result).toEqual(payload);
+            }
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const payload = { data: "test" };
+            const mask = {
+                public_fields: [],
+                private_fields: [],
+            };
+            const contexts = [
+                { user_id: "u1" },
+                { tenant_id: "t1", jurisdiction: "FR.v1" },
+                { role: "admin", user_id: "u2", metadata: { custom: "value" } },
+                {},
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.applyMask(payload, mask, ctx);
+                expect(result).toEqual(payload);
+            }
+        });
+    });
+    describe("verifyZkProof", () => {
+        it("always returns invalid with 'noop_v0' reason", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: { some: "proof" },
+                public_inputs: { value: 42 },
+            };
+            const ctx = {};
+            const result = await adapter.verifyZkProof(proof, ctx);
+            expect(result.valid).toBe(false);
+            expect(result.reason).toBe("noop_v0");
+            expect(result.confidence).toBe(0);
+        });
+        it("handles various proof schemes (V0 ignores)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const schemes = ["stwo", "starknet_stone", "groth16", "plonk"];
+            for (const scheme of schemes) {
+                const proof = {
+                    proof_data: { scheme_data: "test" },
+                    public_inputs: {},
+                    scheme,
+                };
+                const result = await adapter.verifyZkProof(proof, {});
+                expect(result.valid).toBe(false);
+                expect(result.reason).toBe("noop_v0");
+            }
+        });
+        it("accepts empty public inputs", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: "opaque_bytes",
+                public_inputs: {},
+            };
+            const result = await adapter.verifyZkProof(proof, {});
+            expect(result.valid).toBe(false);
+            expect(result.reason).toBe("noop_v0");
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const proof = {
+                proof_data: "test",
+                public_inputs: { x: 1 },
+            };
+            const contexts = [
+                { user_id: "u1" },
+                { tenant_id: "t1", jurisdiction: "EU.v1" },
+                { role: "operator" },
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.verifyZkProof(proof, ctx);
+                expect(result.valid).toBe(false);
+            }
+        });
+    });
+    describe("commitToSmt", () => {
+        it("returns mock SMT root with correct structure", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test_value" };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.smt_root).toBeDefined();
+            expect(result.smt_root).toMatch(/^0x[0-9a-f]+$/);
+            expect(result.leaf_index).toBe(0);
+            expect(result.version).toBe(0);
+        });
+        it("returns deterministic root for same commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "deterministic" };
+            const ctx = {};
+            const result1 = await adapter.commitToSmt(commitment, ctx);
+            const result2 = await adapter.commitToSmt(commitment, ctx);
+            expect(result1.smt_root).toBe(result2.smt_root);
+        });
+        it("returns different root for different commitments", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = {};
+            const result1 = await adapter.commitToSmt({ value: "value1" }, ctx);
+            const result2 = await adapter.commitToSmt({ value: "value2" }, ctx);
+            expect(result1.smt_root).not.toBe(result2.smt_root);
+        });
+        it("respects explicit leaf_index from commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test", index: 42 };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.leaf_index).toBe(42);
+        });
+        it("defaults leaf_index to 0 when not specified", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test" };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.leaf_index).toBe(0);
+        });
+        it("accepts optional salt in commitment", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = {
+                value: "secret",
+                salt: "random_salt_123",
+                index: 5,
+            };
+            const ctx = {};
+            const result = await adapter.commitToSmt(commitment, ctx);
+            expect(result.smt_root).toBeDefined();
+            expect(result.leaf_index).toBe(5);
+            expect(result.version).toBe(0);
+        });
+        it("handles various commitment value types", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = {};
+            const values = [
+                "string value",
+                42,
+                3.14,
+                true,
+                { nested: "object" },
+                [1, 2, 3],
+            ];
+            for (const value of values) {
+                const result = await adapter.commitToSmt({ value }, ctx);
+                expect(result.smt_root).toBeDefined();
+                expect(result.version).toBe(0);
+            }
+        });
+        it("context parameters are accepted and ignored (V0)", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const commitment = { value: "test" };
+            const contexts = [
+                { user_id: "u1", tenant_id: "t1" },
+                { jurisdiction: "CH.v1" },
+                { metadata: { custom: true } },
+            ];
+            for (const ctx of contexts) {
+                const result = await adapter.commitToSmt(commitment, ctx);
+                expect(result.smt_root).toBeDefined();
+            }
+        });
+    });
+    describe("NoopPrivacyAdapter interface compliance", () => {
+        it("satisfies PrivacyPort contract", () => {
+            const adapter = new NoopPrivacyAdapter();
+            expect(typeof adapter.applyMask).toBe("function");
+            expect(typeof adapter.verifyZkProof).toBe("function");
+            expect(typeof adapter.commitToSmt).toBe("function");
+        });
+        it("all async methods return Promise", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const maskResult = adapter.applyMask({}, { public_fields: [], private_fields: [] }, {});
+            const proofResult = adapter.verifyZkProof({ proof_data: "x", public_inputs: {} }, {});
+            const smtResult = adapter.commitToSmt({ value: "x" }, {});
+            expect(maskResult).toBeInstanceOf(Promise);
+            expect(proofResult).toBeInstanceOf(Promise);
+            expect(smtResult).toBeInstanceOf(Promise);
+            await maskResult;
+            await proofResult;
+            await smtResult;
+        });
+        it("methods work together in realistic flow", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            const ctx = { user_id: "user-1", role: "admin" };
+            // Simulate a privacy-respecting workflow (V0: all no-ops)
+            const payload = { secret: "data", public: "info" };
+            const mask = {
+                public_fields: ["public"],
+                private_fields: ["secret"],
+            };
+            const masked = await adapter.applyMask(payload, mask, ctx);
+            expect(masked).toEqual(payload);
+            const commitment = { value: masked };
+            const smtResult = await adapter.commitToSmt(commitment, ctx);
+            expect(smtResult.smt_root).toBeDefined();
+            expect(smtResult.version).toBe(0);
+            const proof = {
+                proof_data: { root: smtResult.smt_root },
+                public_inputs: { commitment_hash: "hash" },
+            };
+            const verified = await adapter.verifyZkProof(proof, ctx);
+            expect(verified.valid).toBe(false);
+            expect(verified.reason).toBe("noop_v0");
+        });
+    });
+    describe("V0 noop semantics validation", () => {
+        it("demonstrates V0 identity semantics: applyMask is identity", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: f(x) = x for any x
+            const testValues = [
+                { a: 1, b: "secret" },
+                "plain text",
+                [1, 2, 3, "secret"],
+                { deeply: { nested: { secret: "data" } } },
+            ];
+            for (const value of testValues) {
+                const result = await adapter.applyMask(value, { public_fields: ["a"], private_fields: ["secret"] }, {});
+                expect(result).toBe(value); // exact same object
+            }
+        });
+        it("demonstrates V0 proof rejection: verifyZkProof always fails", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: verifyZkProof always returns invalid
+            const proofs = [
+                { proof_data: "valid_proof", public_inputs: {} },
+                { proof_data: null, public_inputs: { x: 1 } },
+                { proof_data: { complex: "structure" }, public_inputs: [] },
+            ];
+            for (const proof of proofs) {
+                const result = await adapter.verifyZkProof(proof, {});
+                expect(result.valid).toBe(false);
+                expect(result.reason).toBe("noop_v0");
+                expect(result.confidence).toBe(0);
+            }
+        });
+        it("demonstrates V0 mock SMT: deterministic but no crypto", async () => {
+            const adapter = new NoopPrivacyAdapter();
+            // V0 guarantee: deterministic + version 0
+            const c1 = await adapter.commitToSmt({ value: "test" }, {});
+            const c2 = await adapter.commitToSmt({ value: "test" }, {});
+            expect(c1.smt_root).toBe(c2.smt_root);
+            expect(c1.version).toBe(0);
+            expect(c2.version).toBe(0);
+        });
+    });
+});
+//# sourceMappingURL=privacy.contract.test.js.map

package/dist/ports/privacy.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.contract.test.js","sourceRoot":"","sources":["../../src/ports/privacy.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,GAKnB,MAAM,WAAW,CAAC;AAEnB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnE,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;gBACzB,cAAc,EAAE,CAAC,QAAQ,CAAC;aAC3B,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;YAEzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG;gBACd,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE;wBACN,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;qBACjB;iBACF;aACF,CAAC;YACF,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,SAAS,CAAC;gBAC1B,cAAc,EAAE,CAAC,oBAAoB,CAAC;aACvC,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,IAAI,CAAC;gBACrB,cAAc,EAAE,CAAC,QAAQ,CAAC;gBAC1B,WAAW,EAAE;oBACX;wBACE,KAAK,EAAE,OAAO;wBACd,SAAS,EAAE,sBAAsB;qBAClC;iBACF;aACF,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAE9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,EAAE;gBACjB,cAAc,EAAE,EAAE;aACnB,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,SAAS,GAAG;gBAChB,gBAAgB;gBAChB,EAAE;gBACF,IAAI;gBACJ,IAAI;gBACJ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACT,IAAI;gBACJ,SAAS;aACV,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,EAAE;gBACjB,cAAc,EAAE,EAAE;aACnB,CAAC;YAEF,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE;gBACjB,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE;gBAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBAC/D,EAAE;aACH,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC7B,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aAC7B,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAEvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAE/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAiB;oBAC1B,UAAU,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;oBACnC,aAAa,EAAE,EAAE;oBACjB,MAAM;iBACP,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAEtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,EAAE;aAClB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAEtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,MAAM;gBAClB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;aACxB,CAAC;YAEF,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE;gBACjB,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE;gBAC1C,EAAE,IAAI,EAAE,UAAU,EAAE;aACrB,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACvD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE3D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;YAEpE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjD,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe;gBAC7B,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,CAAC;aACT,CAAC;YACF,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAE1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,CAAC;YAE/B,MAAM,MAAM,GAAG;gBACb,cAAc;gBACd,EAAE;gBACF,IAAI;gBACJ,IAAI;gBACJ,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACpB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;aACV,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBACzD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAEjD,MAAM,QAAQ,GAAG;gBACf,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;gBAClC,EAAE,YAAY,EAAE,OAAO,EAAE;gBACzB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;aAC/B,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,MAAM,CAAC,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,CAAC,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAClC,EAAE,EACF,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EACzC,EAAE,CACH,CAAC;YACF,MAAM,WAAW,GAAG,OAAO,CAAC,aAAa,CACvC,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,EACtC,EAAE,CACH,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAE1D,MAAM,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAE1C,MAAM,UAAU,CAAC;YACjB,MAAM,WAAW,CAAC;YAClB,MAAM,SAAS,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAEjE,0DAA0D;YAC1D,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,GAAmB;gBAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;gBACzB,cAAc,EAAE,CAAC,QAAQ,CAAC;aAC3B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhC,MAAM,UAAU,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElC,MAAM,KAAK,GAAiB;gBAC1B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACxC,aAAa,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;aAC3C,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;QAC5C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,mCAAmC;YACnC,MAAM,UAAU,GAAG;gBACjB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE;gBACrB,YAAY;gBACZ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;gBACnB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;aAC3C,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CACpC,KAAK,EACL,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,EACpD,EAAE,CACH,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,qDAAqD;YACrD,MAAM,MAAM,GAAG;gBACb,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE;gBAChD,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC7C,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;aAC5D,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC;gBACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;YAEzC,0CAA0C;YAC1C,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAE5D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ports/privacy.d.ts

@@ -0,0 +1,132 @@
+/**
+ * PrivacyPort — V0 noop stub for Vauban Privacy Protocol (VPP) integration.
+ *
+ * Implements S0 port #10 (PrivacyPort): placeholder interface for privacy-preserving
+ * operations. Phase 2+ will implement full Stwo+ML-KEM+viewing-key+SMT+cross-domain
+ * functionality per draft-vauban-privacy-protocol-00 (target IETF submission 2026-06-29,
+ * sprint-490 active 78%).
+ *
+ * V0 design: all operations return identity or noop stubs. Enables code to pass type
+ * checks while VPP integration is deferred. No Side effects, no cryptographic guarantees.
+ *
+ * Reference: S0 § cross-spec invariants X-1 (isolation), X-3 (crypto-shredding);
+ * VPP Phase roadmap: draft-vauban-privacy-protocol-00 + integration plan TBD.
+ */
+/**
+ * RevelationMask — declarative specification of which fields should be exposed
+ * during a privacy-respecting operation.
+ */
+export interface RevelationMask {
+    readonly public_fields: string[];
+    readonly private_fields: string[];
+    readonly conditional?: Array<{
+        readonly field: string;
+        readonly condition: string;
+    }>;
+}
+export interface ZkProofInput {
+    readonly proof_data: unknown;
+    readonly public_inputs: unknown;
+    readonly scheme?: string;
+}
+export interface VerifyResult {
+    readonly valid: boolean;
+    readonly reason?: string;
+    readonly confidence?: number;
+}
+export interface Commitment {
+    readonly value: unknown;
+    readonly salt?: string;
+    readonly index?: number;
+}
+export interface SmtResult {
+    readonly smt_root: string;
+    readonly leaf_index: number;
+    readonly version: number;
+    readonly proof?: unknown;
+}
+export interface PrivacyContext {
+    readonly user_id?: string;
+    readonly tenant_id?: string;
+    readonly role?: string;
+    readonly jurisdiction?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+/**
+ * PrivacyPort — V0 noop stub.
+ *
+ * All methods return identity values or noop results. Replaced by full VPP
+ * implementation in Phase 2 (Stwo+ML-KEM+viewing-key+SMT+cross-domain).
+ *
+ * Usage:
+ *   const priv = new NoopPrivacyAdapter();
+ *   const revealed = await priv.applyMask(data, mask, ctx); // data unchanged V0
+ *   const vk = await priv.verifyZkProof(proof, ctx); // {valid: false, reason: 'noop_v0'}
+ */
+export interface PrivacyPort {
+    /**
+     * Apply a revelation mask to payload (V0: returns payload unchanged).
+     *
+     * Phase 2+: will implement field-level hiding via ZK commitments or viewing keys.
+     *
+     * @param payload input object or data structure
+     * @param mask specification of which fields are public/private/conditional
+     * @param ctx privacy context (user, tenant, role, jurisdiction)
+     * @returns masked payload (V0: unchanged)
+     */
+    applyMask(payload: unknown, mask: RevelationMask, ctx: PrivacyContext): Promise<unknown>;
+    /**
+     * Verify a zero-knowledge proof (V0: always returns invalid with 'noop_v0' reason).
+     *
+     * Phase 2+: will implement Stwo proof verification against public inputs.
+     *
+     * @param proof ZK proof object (scheme TBD, likely Stwo)
+     * @param ctx privacy context
+     * @returns { valid: false, reason: 'noop_v0' } in V0
+     */
+    verifyZkProof(proof: ZkProofInput, ctx: PrivacyContext): Promise<VerifyResult>;
+    /**
+     * Commit value to sparse merkle tree (V0: returns deterministic mock root).
+     *
+     * Phase 2+: will implement full SMT with Poseidon hashing and viewing keys.
+     *
+     * @param commitment value or hash to commit
+     * @param ctx privacy context
+     * @returns mock SMT root (V0: deterministic, no cryptographic guarantee)
+     */
+    commitToSmt(commitment: Commitment, ctx: PrivacyContext): Promise<SmtResult>;
+}
+/**
+ * NoopPrivacyAdapter — V0 stub implementation of PrivacyPort.
+ *
+ * All methods return identity values or noop results. Enables type-safe code
+ * while VPP integration is deferred to Phase 2.
+ *
+ * Documentation: "V0 stub — replaced by VPP integration in Phase 2
+ * (Stwo+ML-KEM+viewing key+SMT+cross-domain)."
+ *
+ * Usage:
+ *   const adapter = new NoopPrivacyAdapter();
+ *   const data = { secret: 'hidden', public: 'visible' };
+ *   const masked = await adapter.applyMask(data, mask, ctx);
+ *   // masked === data (unchanged in V0)
+ */
+export declare class NoopPrivacyAdapter implements PrivacyPort {
+    applyMask(payload: unknown, _mask: RevelationMask, _ctx: PrivacyContext): Promise<unknown>;
+    verifyZkProof(_proof: ZkProofInput, _ctx: PrivacyContext): Promise<VerifyResult>;
+    commitToSmt(commitment: Commitment, _ctx: PrivacyContext): Promise<SmtResult>;
+    /**
+     * Compute a deterministic mock SMT root (V0 only).
+     * Purely for testing — no cryptographic guarantee.
+     */
+    private computeMockRoot;
+}
+/**
+ * PrivacyNoopWarning — logged when V0 noop operations are used.
+ * Not thrown as an exception (non-blocking), but logged for observability.
+ */
+export declare class PrivacyNoopWarning extends Error {
+    readonly operation: string;
+    constructor(message: string, operation: string);
+}
+//# sourceMappingURL=privacy.d.ts.map

package/dist/ports/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/ports/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;CACJ;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;OASG;IACH,SAAS,CACP,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;;;;;OAQG;IACH,aAAa,CACX,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB;;;;;;;;OAQG;IACH,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAC9E;AAID;;;;;;;;;;;;;;GAcG;AACH,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,SAAS,CACb,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,OAAO,CAAC;IAKb,aAAa,CACjB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC;IASlB,WAAW,CACf,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,SAAS,CAAC;IAWrB;;;OAGG;IACH,OAAO,CAAC,eAAe;CAUxB;AAID;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aACE,SAAS,EAAE,MAAM;gBAAlD,OAAO,EAAE,MAAM,EAAkB,SAAS,EAAE,MAAM;CAK/D"}

package/dist/ports/privacy.js

@@ -0,0 +1,83 @@
+/**
+ * PrivacyPort — V0 noop stub for Vauban Privacy Protocol (VPP) integration.
+ *
+ * Implements S0 port #10 (PrivacyPort): placeholder interface for privacy-preserving
+ * operations. Phase 2+ will implement full Stwo+ML-KEM+viewing-key+SMT+cross-domain
+ * functionality per draft-vauban-privacy-protocol-00 (target IETF submission 2026-06-29,
+ * sprint-490 active 78%).
+ *
+ * V0 design: all operations return identity or noop stubs. Enables code to pass type
+ * checks while VPP integration is deferred. No Side effects, no cryptographic guarantees.
+ *
+ * Reference: S0 § cross-spec invariants X-1 (isolation), X-3 (crypto-shredding);
+ * VPP Phase roadmap: draft-vauban-privacy-protocol-00 + integration plan TBD.
+ */
+// ─── Noop implementation (V0 stub) ────────────────────────────────────────────
+/**
+ * NoopPrivacyAdapter — V0 stub implementation of PrivacyPort.
+ *
+ * All methods return identity values or noop results. Enables type-safe code
+ * while VPP integration is deferred to Phase 2.
+ *
+ * Documentation: "V0 stub — replaced by VPP integration in Phase 2
+ * (Stwo+ML-KEM+viewing key+SMT+cross-domain)."
+ *
+ * Usage:
+ *   const adapter = new NoopPrivacyAdapter();
+ *   const data = { secret: 'hidden', public: 'visible' };
+ *   const masked = await adapter.applyMask(data, mask, ctx);
+ *   // masked === data (unchanged in V0)
+ */
+export class NoopPrivacyAdapter {
+    async applyMask(payload, _mask, _ctx) {
+        // V0: identity function — return input unchanged
+        return payload;
+    }
+    async verifyZkProof(_proof, _ctx) {
+        // V0: always invalid with noop marker
+        return {
+            valid: false,
+            reason: "noop_v0",
+            confidence: 0,
+        };
+    }
+    async commitToSmt(commitment, _ctx) {
+        // V0: return deterministic mock root based on commitment value
+        // In real Phase 2+, would compute Poseidon hash and maintain SMT state
+        const mockRoot = this.computeMockRoot(commitment);
+        return {
+            smt_root: mockRoot,
+            leaf_index: commitment.index ?? 0,
+            version: 0, // V0 version
+        };
+    }
+    /**
+     * Compute a deterministic mock SMT root (V0 only).
+     * Purely for testing — no cryptographic guarantee.
+     */
+    computeMockRoot(commitment) {
+        // Simple deterministic hash for V0: stringify commitment and hash
+        const str = JSON.stringify(commitment);
+        let hash = 0;
+        for (let i = 0; i < str.length; i++) {
+            hash = (hash << 5) - hash + str.charCodeAt(i);
+            hash = hash & hash; // keep it as 32-bit int
+        }
+        return "0x" + Math.abs(hash).toString(16).padStart(64, "0");
+    }
+}
+// ─── Informational warning (not thrown) ─────────────────────────────────────
+/**
+ * PrivacyNoopWarning — logged when V0 noop operations are used.
+ * Not thrown as an exception (non-blocking), but logged for observability.
+ */
+export class PrivacyNoopWarning extends Error {
+    operation;
+    constructor(message, operation) {
+        super(message);
+        this.operation = operation;
+        this.name = "PrivacyNoopWarning";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+//# sourceMappingURL=privacy.js.map

package/dist/ports/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/ports/privacy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgHH,iFAAiF;AAEjF;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,SAAS,CACb,OAAgB,EAChB,KAAqB,EACrB,IAAoB;QAEpB,iDAAiD;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,MAAoB,EACpB,IAAoB;QAEpB,sCAAsC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,UAAsB,EACtB,IAAoB;QAEpB,+DAA+D;QAC/D,uEAAuE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU,CAAC,KAAK,IAAI,CAAC;YACjC,OAAO,EAAE,CAAC,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,UAAsB;QAC5C,kEAAkE;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,wBAAwB;QAC9C,CAAC;QACD,OAAO,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACE;IAA7C,YAAY,OAAe,EAAkB,SAAiB;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,cAAS,GAAT,SAAS,CAAQ;QAE5D,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/ports/tenant-context.contract.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * TenantContextPort contract tests.
+ *
+ * Applied to any TenantContextPort implementation.
+ * Tests verify: isolation, degraded mode transitions, §5.4 cap enforcement,
+ * and cumulative metric computation per S2 spec.
+ */
+import { type TenantContextPort } from "./tenant-context.js";
+/**
+ * Factory function — tests accept any TenantContextPort implementation.
+ * Example: factory = () => new MemoryTenantContextStore()
+ */
+export declare const tenantContextPortContract: (factory: () => TenantContextPort) => void;
+//# sourceMappingURL=tenant-context.contract.test.d.ts.map

package/dist/ports/tenant-context.contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.contract.test.d.ts","sourceRoot":"","sources":["../../src/ports/tenant-context.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,KAAK,iBAAiB,EAKvB,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,eAAO,MAAM,yBAAyB,GAAI,SAAS,MAAM,iBAAiB,SAuRzE,CAAC"}