@vauban-org/agent-sdk 1.0.0 → 1.3.0

package/dist/ports/manifest-registry.contract.test.js

@@ -0,0 +1,246 @@
+/**
+ * ManifestRegistryPort contract tests (T-S1-1..T-S1-12).
+ *
+ * Applied to in-memory reference impl. Any ManifestRegistryPort adapter must satisfy all tests.
+ * Tests cover: registration, lookup, versioning, signature validation, revocation, compliance gating.
+ */
+import { describe, expect, test } from "vitest";
+import { ManifestNotFoundError, ManifestSignatureInvalidError, } from "./manifest-registry.js";
+/**
+ * In-memory reference implementation for contract testing.
+ */
+class InMemoryManifestRegistry {
+    manifests = new Map();
+    claimIds = new Map(); // claim_id → manifest key
+    async register(manifest, _options) {
+        // I-S1-2: tier=production + mode=audit_only → reject
+        if (manifest.tier === "production" &&
+            manifest.compliance_mode === "audit_only") {
+            return {
+                claim_id: "",
+                status: "failed",
+                errors: [
+                    {
+                        code: "I-S1-2",
+                        description: "Production tier requires strict compliance mode",
+                    },
+                ],
+            };
+        }
+        // Verify signature
+        try {
+            await this.verifySignature(manifest);
+        }
+        catch (e) {
+            return {
+                claim_id: "",
+                status: "failed",
+                errors: [
+                    {
+                        code: "SIGNATURE_INVALID",
+                        description: `Signature verification failed: ${String(e)}`,
+                    },
+                ],
+            };
+        }
+        const key = `${manifest.name}@${manifest.version}`;
+        const existing = this.manifests.get(key);
+        // No duplicate versions allowed
+        if (existing) {
+            return {
+                claim_id: "",
+                status: "failed",
+                errors: [
+                    {
+                        code: "VERSION_CONFLICT",
+                        description: `Version already registered: ${key}`,
+                    },
+                ],
+            };
+        }
+        // Register success
+        const claimId = crypto.randomUUID();
+        this.manifests.set(key, {
+            ...manifest,
+            status: "active",
+        });
+        this.claimIds.set(claimId, key);
+        return {
+            claim_id: claimId,
+            status: "registered",
+            manifest_id: claimId,
+        };
+    }
+    async lookup(name, version) {
+        const key = `${name}@${version}`;
+        const m = this.manifests.get(key);
+        if (!m)
+            return null;
+        if (m.status === "revoked")
+            return null;
+        return m;
+    }
+    async revoke(claim_id, reason) {
+        const key = this.claimIds.get(claim_id);
+        if (!key) {
+            throw new ManifestNotFoundError("unknown", "unknown");
+        }
+        const m = this.manifests.get(key);
+        if (m) {
+            m.status = "revoked";
+            m.revokedAt = new Date();
+            m.revokedReason = reason;
+        }
+    }
+    async listVersions(name) {
+        const versions = Array.from(this.manifests.keys())
+            .filter((key) => key.startsWith(`${name}@`))
+            .map((key) => key.split("@")[1]);
+        // Sort by semver
+        return versions.sort((a, b) => {
+            const aParts = a.split(".").map(Number);
+            const bParts = b.split(".").map(Number);
+            for (let i = 0; i < 3; i++) {
+                const cmp = (aParts[i] ?? 0) - (bParts[i] ?? 0);
+                if (cmp !== 0)
+                    return cmp;
+            }
+            return 0;
+        });
+    }
+    async verifySignature(manifest) {
+        // Simple stub: just check that signature and pubkey are non-empty hex
+        const sigHex = /^[0-9a-f]{128}$/i;
+        const pubkeyHex = /^[0-9a-f]{64}$/i;
+        if (!sigHex.test(manifest.signature)) {
+            throw new ManifestSignatureInvalidError(manifest.name, manifest.version, "signature not 64-byte hex");
+        }
+        if (!pubkeyHex.test(manifest.ed25519_pubkey)) {
+            throw new ManifestSignatureInvalidError(manifest.name, manifest.version, "pubkey not 32-byte hex");
+        }
+        return true;
+    }
+}
+function makeManifest(overrides = {}) {
+    return {
+        name: "vauban.bastion.test-agent",
+        version: "1.0.0",
+        tier: "test",
+        compliance_mode: "strict",
+        capabilities: ["bastion.swap"],
+        compliance: {
+            jurisdictions: ["FR.v1"],
+            legal_bases: ["gdpr.art6_1_b"],
+            data_classification: "internal",
+        },
+        runtime: {
+            max_compute_seconds: 30,
+            max_llm_tokens: 10000,
+        },
+        ed25519_pubkey: "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        signature: "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        manifestHash: "abc123def456",
+        ...overrides,
+    };
+}
+export const manifestRegistryPortContract = (factory) => {
+    describe("ManifestRegistryPort contract", () => {
+        test("T-S1-1: registers + retrieves manifest", async () => {
+            const registry = factory();
+            const manifest = makeManifest();
+            const result = await registry.register(manifest);
+            expect(result.status).toBe("registered");
+            expect(result.claim_id).toBeTruthy();
+            const retrieved = await registry.lookup(manifest.name, manifest.version);
+            expect(retrieved).not.toBeNull();
+            expect(retrieved?.name).toBe(manifest.name);
+            expect(retrieved?.version).toBe(manifest.version);
+            expect(retrieved?.tier).toBe(manifest.tier);
+        });
+        test("T-S1-3: rejects production tier with audit_only mode (I-S1-2)", async () => {
+            const registry = factory();
+            const manifest = makeManifest({
+                tier: "production",
+                compliance_mode: "audit_only",
+            });
+            const result = await registry.register(manifest);
+            expect(result.status).toBe("failed");
+            expect(result.errors).toBeDefined();
+            expect(result.errors.length).toBeGreaterThan(0);
+            expect(result.errors[0].code).toBe("I-S1-2");
+        });
+        test("T-S1-5: rejects duplicate version (I-S1-1 monotone)", async () => {
+            const registry = factory();
+            const manifest = makeManifest({ version: "1.0.0" });
+            // First registration succeeds
+            const result1 = await registry.register(manifest);
+            expect(result1.status).toBe("registered");
+            // Second with same version fails
+            const result2 = await registry.register(manifest);
+            expect(result2.status).toBe("failed");
+            expect(result2.errors).toBeDefined();
+            expect(result2.errors[0].code).toBe("VERSION_CONFLICT");
+        });
+        test("T-S1-6: revoke makes lookup return null + emits revocation", async () => {
+            const registry = factory();
+            const manifest = makeManifest();
+            const result = await registry.register(manifest);
+            expect(result.status).toBe("registered");
+            const claimId = result.claim_id;
+            // Before revoke: lookup succeeds
+            let retrieved = await registry.lookup(manifest.name, manifest.version);
+            expect(retrieved).not.toBeNull();
+            // Revoke
+            await registry.revoke(claimId, "deprecated");
+            // After revoke: lookup returns null
+            retrieved = await registry.lookup(manifest.name, manifest.version);
+            expect(retrieved).toBeNull();
+        });
+        test("T-S1-7: listVersions returns sorted semver", async () => {
+            const registry = factory();
+            // Register multiple versions
+            const versions = ["1.0.0", "1.1.0", "1.0.1", "2.0.0"];
+            for (const v of versions) {
+                const manifest = makeManifest({ version: v });
+                await registry.register(manifest);
+            }
+            // List should be sorted
+            const listed = await registry.listVersions("vauban.bastion.test-agent");
+            expect(listed).toEqual(["1.0.0", "1.0.1", "1.1.0", "2.0.0"]);
+        });
+        test("T-S1-2: concurrent registration of v1 and v2 succeeds", async () => {
+            const registry = factory();
+            const v1 = makeManifest({ version: "1.0.0" });
+            const v2 = makeManifest({ version: "2.0.0" });
+            const [result1, result2] = await Promise.all([
+                registry.register(v1),
+                registry.register(v2),
+            ]);
+            expect(result1.status).toBe("registered");
+            expect(result2.status).toBe("registered");
+            const retrieved1 = await registry.lookup("vauban.bastion.test-agent", "1.0.0");
+            const retrieved2 = await registry.lookup("vauban.bastion.test-agent", "2.0.0");
+            expect(retrieved1).toBeTruthy();
+            expect(retrieved2).toBeTruthy();
+        });
+        test("verifySignature validates Ed25519 signature format", async () => {
+            const registry = factory();
+            const manifest = makeManifest({
+                signature: "invalid", // Not 64-byte hex
+            });
+            await expect(registry.verifySignature(manifest)).rejects.toThrow(ManifestSignatureInvalidError);
+        });
+        test("revoke on unknown claim_id throws ManifestNotFoundError", async () => {
+            const registry = factory();
+            await expect(registry.revoke("unknown-claim-id", "test")).rejects.toThrow(ManifestNotFoundError);
+        });
+        test("lookup on unknown name returns empty array from listVersions", async () => {
+            const registry = factory();
+            const versions = await registry.listVersions("unknown.agent.name");
+            expect(versions).toEqual([]);
+        });
+    });
+};
+// ─── Apply contract to InMemoryManifestRegistry ────────────────────────────
+manifestRegistryPortContract(() => new InMemoryManifestRegistry());
+//# sourceMappingURL=manifest-registry.contract.test.js.map

package/dist/ports/manifest-registry.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-registry.contract.test.js","sourceRoot":"","sources":["../../src/ports/manifest-registry.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAIL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC;;GAEG;AACH,MAAM,wBAAwB;IACpB,SAAS,GAAG,IAAI,GAAG,EAGxB,CAAC;IACI,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0BAA0B;IAExE,KAAK,CAAC,QAAQ,CACZ,QAAkB,EAClB,QAAoD;QAEpD,qDAAqD;QACrD,IACE,QAAQ,CAAC,IAAI,KAAK,YAAY;YAC9B,QAAQ,CAAC,eAAe,KAAK,YAAY,EACzC,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iDAAiD;qBAC/D;iBACF;aACF,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,kCAAkC,MAAM,CAAC,CAAC,CAAC,EAAE;qBAC3D;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzC,gCAAgC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,kBAAkB;wBACxB,WAAW,EAAE,+BAA+B,GAAG,EAAE;qBAClD;iBACF;aACF,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACtB,GAAG,QAAQ;YACX,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAEhC,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,OAAO;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAe;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAExC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,CAAC;YACN,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YACzB,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;aAC/C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;aAC3C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnC,iBAAiB;QACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChD,IAAI,GAAG,KAAK,CAAC;oBAAE,OAAO,GAAG,CAAC;YAC5B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAkB;QACtC,sEAAsE;QACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAClC,MAAM,SAAS,GAAG,iBAAiB,CAAC;QAEpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,6BAA6B,CACrC,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,6BAA6B,CACrC,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,OAAO,EAChB,wBAAwB,CACzB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,YAA+B,EAAE;IACrD,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,QAAQ;QACzB,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,UAAU,EAAE;YACV,aAAa,EAAE,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,CAAC,eAAe,CAAC;YAC9B,mBAAmB,EAAE,UAAU;SAChC;QACD,OAAO,EAAE;YACP,mBAAmB,EAAE,EAAE;YACvB,cAAc,EAAE,KAAK;SACtB;QACD,cAAc,EACZ,kEAAkE;QACpE,SAAS,EACP,kIAAkI;QACpI,YAAY,EAAE,cAAc;QAC5B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAmC,EACnC,EAAE;IACF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAEhC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;YAErC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC/E,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC;gBAC5B,IAAI,EAAE,YAAY;gBAClB,eAAe,EAAE,YAAY;aAC9B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAEpD,8BAA8B;YAC9B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAE1C,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAEhC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;YAEhC,iCAAiC;YACjC,IAAI,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAEjC,SAAS;YACT,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAE7C,oCAAoC;YACpC,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAE3B,6BAA6B;YAC7B,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAED,wBAAwB;YACxB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAE3B,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAE9C,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;aACtB,CAAC,CAAC;YAEH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAE1C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CACtC,2BAA2B,EAC3B,OAAO,CACR,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CACtC,2BAA2B,EAC3B,OAAO,CACR,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC;gBAC5B,SAAS,EAAE,SAAS,EAAE,kBAAkB;aACzC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC9D,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvE,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;YACnE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,8EAA8E;AAE9E,4BAA4B,CAAC,GAAG,EAAE,CAAC,IAAI,wBAAwB,EAAE,CAAC,CAAC"}

package/dist/ports/manifest-registry.d.ts

@@ -0,0 +1,116 @@
+/**
+ * ManifestRegistryPort — agent manifest registration and lifecycle management (S1 spec).
+ *
+ * Implements: manifest registration with Ed25519 signatures, lifecycle states
+ * (active/deprecated/revoked), version monotonicity, and tier-based compliance gating.
+ *
+ * Invariants enforced: I-S1-1..12 (capabilities, tier constraints, versioning).
+ * Errors: ManifestNotFoundError, ManifestSignatureInvalidError, ManifestVersionConflictError,
+ * ManifestComplianceConflictError (from S5 Cedar G-3).
+ */
+export type Tier = "dev" | "test" | "pilot" | "production" | "internal" | "legacy";
+export declare const SUPPORTED_TIERS: Tier[];
+export type ComplianceMode = "strict" | "audit_only";
+export interface Manifest {
+    readonly name: string;
+    readonly version: string;
+    readonly tier: Tier;
+    readonly compliance_mode: ComplianceMode;
+    readonly capabilities: readonly string[];
+    readonly compliance: {
+        readonly jurisdictions: readonly string[];
+        readonly legal_bases: readonly string[];
+        readonly data_classification: string;
+    };
+    readonly runtime: {
+        readonly max_compute_seconds: number;
+        readonly max_llm_tokens: number;
+    };
+    readonly ed25519_pubkey: string;
+    readonly signature: string;
+    readonly manifestHash: string;
+}
+export type RegistrationStatus = "registered" | "partial" | "failed";
+export interface ComplianceError {
+    readonly code: string;
+    readonly description: string;
+}
+export interface RegistrationResult {
+    readonly claim_id: string;
+    readonly status: RegistrationStatus;
+    readonly manifest_id?: string;
+    readonly errors?: readonly ComplianceError[];
+}
+export interface RegisterOptions {
+    readonly operatorId?: string;
+    readonly timestamp?: Date;
+}
+export interface LookupResult {
+    readonly manifest: Manifest | null;
+    readonly status?: "active" | "deprecated" | "revoked";
+    readonly deprecated_at?: Date;
+    readonly revoked_at?: Date;
+    readonly revocation_reason?: string;
+}
+export interface ManifestRegistryPort {
+    /**
+     * Register a manifest with Ed25519 signature validation.
+     * Validates I-S1-1..12 invariants before persisting.
+     * Rejects I-S1-2 violation: tier='production' + mode='audit_only'.
+     * Returns claim_id (signed Claim artifact) or ComplianceErrors.
+     */
+    register(manifest: Manifest, options?: RegisterOptions): Promise<RegistrationResult>;
+    /**
+     * Look up a manifest by name + version.
+     * Returns null if not found or revoked.
+     * Does not include errors list (use getValidationErrors for detailed checks).
+     */
+    lookup(name: string, version: string): Promise<Manifest | null>;
+    /**
+     * Revoke a manifest by claim_id.
+     * After revocation, lookup() returns null.
+     * Emits revocation event (audit trail).
+     * Returns void on success; throws ManifestNotFoundError if claim_id invalid.
+     */
+    revoke(claim_id: string, reason: string): Promise<void>;
+    /**
+     * List all versions of a manifest by name, sorted by semver.
+     * Returns versions in ascending order (0.1.0 < 1.0.0).
+     * Returns empty array if name not found.
+     */
+    listVersions(name: string): Promise<readonly string[]>;
+    /**
+     * Validate a manifest signature against its ed25519_pubkey.
+     * Recomputes manifestHash and checks signature.
+     * Returns true if valid; throws ManifestSignatureInvalidError if invalid.
+     */
+    verifySignature(manifest: Manifest): Promise<boolean>;
+}
+export declare class ManifestNotFoundError extends Error {
+    readonly name: string;
+    readonly version: string;
+    constructor(name: string, version: string);
+}
+export declare class ManifestSignatureInvalidError extends Error {
+    readonly name: string;
+    readonly version: string;
+    readonly cause?: unknown | undefined;
+    constructor(name: string, version: string, cause?: unknown | undefined);
+}
+export declare class ManifestVersionConflictError extends Error {
+    readonly name: string;
+    readonly version: string;
+    readonly existingStatus: string;
+    constructor(name: string, version: string, existingStatus: string);
+}
+export declare class ManifestComplianceConflictError extends Error {
+    readonly name: string;
+    readonly version: string;
+    readonly violation: string;
+    constructor(name: string, version: string, violation: string);
+}
+export declare class ManifestValidationError extends Error {
+    readonly violations: readonly ComplianceError[];
+    constructor(violations: readonly ComplianceError[]);
+}
+//# sourceMappingURL=manifest-registry.d.ts.map

package/dist/ports/manifest-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-registry.d.ts","sourceRoot":"","sources":["../../src/ports/manifest-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,IAAI,GACZ,KAAK,GACL,MAAM,GACN,OAAO,GACP,YAAY,GACZ,UAAU,GACV,QAAQ,CAAC;AAEb,eAAO,MAAM,eAAe,EAAE,IAAI,EAOjC,CAAC;AAIF,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,CAAC;AAIrD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAID,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAID,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAID,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CACN,QAAQ,EAAE,QAAQ,EAClB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAEhE;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAEvD;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAID,qBAAa,qBAAsB,SAAQ,KAAK;aAClB,IAAI,EAAE,MAAM;aAAkB,OAAO,EAAE,MAAM;gBAA7C,IAAI,EAAE,MAAM,EAAkB,OAAO,EAAE,MAAM;CAK1E;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAEpC,IAAI,EAAE,MAAM;aACZ,OAAO,EAAE,MAAM;aACf,KAAK,CAAC,EAAE,OAAO;gBAFf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,IAAI,EAAE,MAAM;aACZ,OAAO,EAAE,MAAM;aACf,cAAc,EAAE,MAAM;gBAFtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM;CAQzC;AAED,qBAAa,+BAAgC,SAAQ,KAAK;aAEtC,IAAI,EAAE,MAAM;aACZ,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM;gBAFjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM;CAMpC;AAED,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,UAAU,EAAE,SAAS,eAAe,EAAE;gBAAtC,UAAU,EAAE,SAAS,eAAe,EAAE;CAKnE"}

package/dist/ports/manifest-registry.js

@@ -0,0 +1,79 @@
+/**
+ * ManifestRegistryPort — agent manifest registration and lifecycle management (S1 spec).
+ *
+ * Implements: manifest registration with Ed25519 signatures, lifecycle states
+ * (active/deprecated/revoked), version monotonicity, and tier-based compliance gating.
+ *
+ * Invariants enforced: I-S1-1..12 (capabilities, tier constraints, versioning).
+ * Errors: ManifestNotFoundError, ManifestSignatureInvalidError, ManifestVersionConflictError,
+ * ManifestComplianceConflictError (from S5 Cedar G-3).
+ */
+export const SUPPORTED_TIERS = [
+    "dev",
+    "test",
+    "pilot",
+    "production",
+    "internal",
+    "legacy",
+];
+// ─── Typed errors ─────────────────────────────────────────────────────────────
+export class ManifestNotFoundError extends Error {
+    name;
+    version;
+    constructor(name, version) {
+        super(`Manifest not found: ${name}@${version}`);
+        this.name = name;
+        this.version = version;
+        this.name = "ManifestNotFoundError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class ManifestSignatureInvalidError extends Error {
+    name;
+    version;
+    cause;
+    constructor(name, version, cause) {
+        super(`Manifest signature invalid for ${name}@${version}`);
+        this.name = name;
+        this.version = version;
+        this.cause = cause;
+        this.name = "ManifestSignatureInvalidError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class ManifestVersionConflictError extends Error {
+    name;
+    version;
+    existingStatus;
+    constructor(name, version, existingStatus) {
+        super(`Manifest version conflict: ${name}@${version} already registered as ${existingStatus}`);
+        this.name = name;
+        this.version = version;
+        this.existingStatus = existingStatus;
+        this.name = "ManifestVersionConflictError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class ManifestComplianceConflictError extends Error {
+    name;
+    version;
+    violation;
+    constructor(name, version, violation) {
+        super(`Compliance violation for ${name}@${version}: ${violation}`);
+        this.name = name;
+        this.version = version;
+        this.violation = violation;
+        this.name = "ManifestComplianceConflictError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class ManifestValidationError extends Error {
+    violations;
+    constructor(violations) {
+        super(`Manifest validation failed with ${violations.length} violation(s)`);
+        this.violations = violations;
+        this.name = "ManifestValidationError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+//# sourceMappingURL=manifest-registry.js.map

package/dist/ports/manifest-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-registry.js","sourceRoot":"","sources":["../../src/ports/manifest-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,MAAM,CAAC,MAAM,eAAe,GAAW;IACrC,KAAK;IACL,MAAM;IACN,OAAO;IACP,YAAY;IACZ,UAAU;IACV,QAAQ;CACT,CAAC;AAyGF,iFAAiF;AAEjF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAClB;IAA8B;IAA1D,YAA4B,IAAY,EAAkB,OAAe;QACvE,KAAK,CAAC,uBAAuB,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QADtB,SAAI,GAAJ,IAAI,CAAQ;QAAkB,YAAO,GAAP,OAAO,CAAQ;QAEvE,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAEpC;IACA;IACA;IAHlB,YACkB,IAAY,EACZ,OAAe,EACf,KAAe;QAE/B,KAAK,CAAC,kCAAkC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QAJ3C,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAEnC;IACA;IACA;IAHlB,YACkB,IAAY,EACZ,OAAe,EACf,cAAsB;QAEtC,KAAK,CACH,8BAA8B,IAAI,IAAI,OAAO,0BAA0B,cAAc,EAAE,CACxF,CAAC;QANc,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACf,mBAAc,GAAd,cAAc,CAAQ;QAKtC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAEtC;IACA;IACA;IAHlB,YACkB,IAAY,EACZ,OAAe,EACf,SAAiB;QAEjC,KAAK,CAAC,4BAA4B,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC,CAAC;QAJnD,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,UAAsC;QAChE,KAAK,CAAC,mCAAmC,UAAU,CAAC,MAAM,eAAe,CAAC,CAAC;QADjD,eAAU,GAAV,UAAU,CAA4B;QAEhE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/ports/observability.contract.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ObservabilityPort contract tests — validate port interface compliance.
+ *
+ * Tests verify:
+ * - startSpan returns a valid Span with all methods
+ * - recordEvent accepts all 5 severity levels
+ * - recordMetric accepts gauge, counter, histogram types
+ * - flush() resolves successfully
+ * - NoopObservabilityPort satisfies the interface
+ */
+export {};
+//# sourceMappingURL=observability.contract.test.d.ts.map

package/dist/ports/observability.contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.contract.test.d.ts","sourceRoot":"","sources":["../../src/ports/observability.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}