@vess-id/ai-identity 0.0.0-dev-20260902121045

package/dist/constraint/constraint-evaluator.d.ts

@@ -0,0 +1,103 @@
+/**
+ * ConstraintEvaluator
+ * Grant制約の評価ロジック
+ */
+import { GrantConstraints, TimeWindowConstraint, EvaluationContext, ConstraintEvaluationResult, ConstraintViolation, ConstraintWarning, PermissionConstraints, PermissionTimeConstraint } from '../types';
+export interface ConstraintEvaluatorOptions {
+    /** 警告を発する残り実行回数の閾値 */
+    invocationWarningThreshold?: number;
+    /** 警告を発するリスクスコアの閾値（riskThresholdに対する割合） */
+    riskWarningRatio?: number;
+    /** デフォルトタイムゾーン */
+    defaultTimezone?: string;
+}
+/**
+ * 制約評価クラス
+ */
+export declare class ConstraintEvaluator {
+    private options;
+    constructor(options?: Partial<ConstraintEvaluatorOptions>);
+    /**
+     * 制約を総合評価
+     */
+    evaluate(constraints: GrantConstraints, context: EvaluationContext, currentInvocations: number, expiresAt?: Date): ConstraintEvaluationResult;
+    /**
+     * 期限チェック
+     */
+    checkExpiration(grantExpiresAt?: Date, constraintExpiresAt?: string): {
+        violation?: ConstraintViolation;
+    };
+    /**
+     * 実行回数チェック
+     */
+    checkInvocationLimit(maxInvocations?: number, currentInvocations?: number): {
+        violation?: ConstraintViolation;
+        warning?: ConstraintWarning;
+    };
+    /**
+     * 時間帯チェック
+     */
+    checkTimeWindow(timeWindow: TimeWindowConstraint, currentTime: Date): {
+        violation?: ConstraintViolation;
+        warning?: ConstraintWarning;
+    };
+    /**
+     * IPアドレスチェック
+     */
+    checkIpAllowlist(allowlist: string[], ipAddress: string): {
+        violation?: ConstraintViolation;
+    };
+    /**
+     * リスクスコアチェック
+     */
+    checkRiskThreshold(threshold: number, currentScore: number): {
+        violation?: ConstraintViolation;
+        warning?: ConstraintWarning;
+    };
+    /**
+     * Evaluate PermissionConstraints from a PermissionRule.
+     *
+     * This is the VC-level constraint evaluator that works with the
+     * normalized PermissionConstraints format (as opposed to GrantConstraints).
+     *
+     * Used by the PolicyEvaluator after rule matching to verify
+     * rule-level constraints are satisfied.
+     */
+    evaluatePermissionConstraints(constraints: PermissionConstraints, context: {
+        now: number;
+        ipAddress?: string;
+        riskScore?: number;
+        invocationCount?: number;
+    }): {
+        allowed: boolean;
+        violations: ConstraintViolation[];
+        warnings: ConstraintWarning[];
+    };
+    /**
+     * Check PermissionTimeConstraint (supports both absolute and recurring)
+     */
+    checkPermissionTimeConstraint(time: PermissionTimeConstraint, currentTime: Date): {
+        violation?: ConstraintViolation;
+        warning?: ConstraintWarning;
+    };
+    private getDayOfWeekInTimezone;
+    private getTimeInTimezone;
+    private getDayName;
+    private timeToMinutes;
+    /**
+     * Check if an IP address is within a CIDR range or matches exactly.
+     * Uses unsigned 32-bit arithmetic to avoid sign-bit issues.
+     * Public for reuse by other services (e.g., LocalPolicyEvaluatorService).
+     */
+    isIpInCidr(ip: string, cidr: string): boolean;
+    private ipToNumber;
+}
+/**
+ * デフォルトのConstraintEvaluatorインスタンス
+ */
+export declare const defaultConstraintEvaluator: ConstraintEvaluator;
+/**
+ * 簡易評価関数
+ */
+export declare function evaluateConstraints(constraints: GrantConstraints, context: EvaluationContext, currentInvocations: number, expiresAt?: Date): ConstraintEvaluationResult;
+//# sourceMappingURL=constraint-evaluator.d.ts.map

package/dist/constraint/constraint-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraint-evaluator.d.ts","sourceRoot":"","sources":["../../src/constraint/constraint-evaluator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,UAAU,CAAA;AAEjB,MAAM,WAAW,0BAA0B;IACzC,sBAAsB;IACtB,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,2CAA2C;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kBAAkB;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAQD;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAA4B;gBAE/B,OAAO,CAAC,EAAE,OAAO,CAAC,0BAA0B,CAAC;IAIzD;;OAEG;IACH,QAAQ,CACN,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,iBAAiB,EAC1B,kBAAkB,EAAE,MAAM,EAC1B,SAAS,CAAC,EAAE,IAAI,GACf,0BAA0B;IAgE7B;;OAEG;IACH,eAAe,CACb,cAAc,CAAC,EAAE,IAAI,EACrB,mBAAmB,CAAC,EAAE,MAAM,GAC3B;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAE;IA4BtC;;OAEG;IACH,oBAAoB,CAClB,cAAc,CAAC,EAAE,MAAM,EACvB,kBAAkB,CAAC,EAAE,MAAM,GAC1B;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC;QAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;KAAE;IA8BnE;;OAEG;IACH,eAAe,CACb,UAAU,EAAE,oBAAoB,EAChC,WAAW,EAAE,IAAI,GAChB;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC;QAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;KAAE;IAoEnE;;OAEG;IACH,gBAAgB,CACd,SAAS,EAAE,MAAM,EAAE,EACnB,SAAS,EAAE,MAAM,GAChB;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAE;IA6BtC;;OAEG;IACH,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC;QAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;KAAE;IA6BnE;;;;;;;;OAQG;IACH,6BAA6B,CAC3B,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE;QACP,GAAG,EAAE,MAAM,CAAA;QACX,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,GACA;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC;QAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAA;KAAE;IA4CzF;;OAEG;IACH,6BAA6B,CAC3B,IAAI,EAAE,wBAAwB,EAC9B,WAAW,EAAE,IAAI,GAChB;QAAE,SAAS,CAAC,EAAE,mBAAmB,CAAC;QAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;KAAE;IAsDnE,OAAO,CAAC,sBAAsB;IAW9B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,aAAa;IAKrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAoB7C,OAAO,CAAC,UAAU;CAWnB;AAED;;GAEG;AACH,eAAO,MAAM,0BAA0B,qBAA4B,CAAA;AAEnE;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,iBAAiB,EAC1B,kBAAkB,EAAE,MAAM,EAC1B,SAAS,CAAC,EAAE,IAAI,GACf,0BAA0B,CAE5B"}

package/dist/constraint/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Constraint module exports
+ */
+export { ConstraintEvaluator, ConstraintEvaluatorOptions, defaultConstraintEvaluator, evaluateConstraints } from './constraint-evaluator';
+//# sourceMappingURL=index.d.ts.map

package/dist/constraint/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constraint/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,wBAAwB,CAAA"}

package/dist/did/agent.d.ts

@@ -0,0 +1,58 @@
+import { Agent, DIDDocument } from '../types';
+import { KeyManager } from './key-manager';
+import { AgentDIDManagerOptions } from '../agent/agent-did-manager';
+export declare class AgentManager {
+    private keyManager;
+    private agentDIDManager;
+    /**
+     * 🔴 `options` is what makes `config.agentMappingDir` mean anything: without
+     * forwarding it, a caller's directory is accepted by the config and then
+     * ignored, and every tenant lands back in the shared `~/.vess-aidentity`.
+     */
+    constructor(keyManager?: KeyManager, options?: AgentDIDManagerOptions);
+    /**
+     * Create a new AI agent with unique ID and DID
+     */
+    create(metadata?: Record<string, any>): Promise<Agent & {
+        id: string;
+    }>;
+    /**
+     * Get agent DID by agent ID
+     */
+    getAgentDID(agentId: string): Promise<string>;
+    /**
+     * Get agent by ID
+     */
+    getAgent(agentId: string): Promise<Agent & {
+        id: string;
+    }>;
+    /**
+     * Delete an agent and its DID
+     */
+    deleteAgent(agentId: string): Promise<void>;
+    /**
+     * Resolve a DID to get DID Document
+     */
+    resolve(did: string): Promise<DIDDocument>;
+    /**
+     * Export agent with private key (for backup)
+     */
+    export(did: string): Promise<{
+        agent: Agent;
+        privateKey: any;
+    }>;
+    /**
+     * Import agent from backup
+     */
+    import(agent: Agent, privateKey: any): Promise<void>;
+    /**
+     * List all locally stored agents
+     */
+    list(): Promise<Array<Agent & {
+        id: string;
+    }>>;
+    private createDidDocument;
+    private resolveDidJwkLocally;
+    private registerDid;
+}
+//# sourceMappingURL=agent.d.ts.map

package/dist/did/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/did/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAmB,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAGpF,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAY;IAC9B,OAAO,CAAC,eAAe,CAAiB;IAExC;;;;OAIG;gBACS,UAAU,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,sBAAsB;IAKrE;;OAEG;IACG,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IA8B7E;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAYhE;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAuBhD;;OAEG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,UAAU,EAAE,GAAG,CAAA;KAAE,CAAC;IAiBrE;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAqBpD,OAAO,CAAC,iBAAiB;IAqBzB,OAAO,CAAC,oBAAoB;YAQd,WAAW;CAK1B"}

package/dist/did/did-utils.d.ts

@@ -0,0 +1,82 @@
+/**
+ * DID Utilities
+ *
+ * Common utility functions for DID operations.
+ * These functions are shared across AgentDIDManager, EphemeralDIDManager,
+ * UserIdentityManager, and UserRootDIDManager.
+ */
+import type { JWK } from 'jose';
+/**
+ * Public key JWK properties for did:jwk creation
+ */
+export interface PublicKeyJWK {
+    kty: string;
+    crv?: string;
+    x?: string;
+    y?: string;
+    use?: string;
+    alg?: string;
+}
+/**
+ * Create did:jwk from a public key JWK
+ *
+ * @param publicKey - The public key JWK (can include private key fields, they will be filtered)
+ * @returns The did:jwk string
+ *
+ * @example
+ * ```typescript
+ * const keyPair = await SDJwtClient.generateKeyPair()
+ * const did = createDidJwk(keyPair.publicKey)
+ * // => did:jwk:eyJrdHkiOiJFQyIsImNydiI6IlAtMjU2IiwieCI6Ii4uLiIsInkiOiIuLi4ifQ
+ * ```
+ */
+export declare function createDidJwk(publicKey: JWK | PublicKeyJWK): string;
+/**
+ * Extract public key JWK from a private key JWK
+ *
+ * @param privateKey - The private key JWK containing the 'd' parameter
+ * @returns The public key JWK (without private key material)
+ *
+ * @example
+ * ```typescript
+ * const keyPair = await SDJwtClient.generateKeyPair()
+ * const publicKey = extractPublicKey(keyPair.privateKey)
+ * ```
+ */
+export declare function extractPublicKey(privateKey: JWK): JWK;
+/**
+ * Extract public key JWK from a did:jwk string
+ *
+ * @param did - The did:jwk string
+ * @returns The public key JWK decoded from the DID
+ * @throws Error if the DID is not in did:jwk format
+ *
+ * @example
+ * ```typescript
+ * const publicKey = extractPublicKeyFromDid('did:jwk:eyJrdHkiOiJFQyIsImNydiI6IlAtMjU2IiwieCI6Ii4uLiIsInkiOiIuLi4ifQ')
+ * ```
+ */
+export declare function extractPublicKeyFromDid(did: string): JWK;
+/**
+ * Validate that a string is a valid did:jwk
+ *
+ * @param did - The string to validate
+ * @returns true if valid did:jwk, false otherwise
+ */
+export declare function isValidDidJwk(did: string): boolean;
+/**
+ * Get the key ID (kid) from a did:jwk
+ * Following the did:jwk specification, the key ID is the DID with #0 appended
+ *
+ * @param did - The did:jwk string
+ * @returns The key ID
+ */
+export declare function getKeyIdFromDid(did: string): string;
+/**
+ * Compare two EC public key JWKs for equality.
+ * Only compares canonical fields (kty, crv, x, y) to avoid
+ * mismatches from optional fields like alg, use, kid, key_ops.
+ * Returns false if any canonical field is missing or undefined.
+ */
+export declare function publicKeysMatch(a: Record<string, unknown>, b: Record<string, unknown>): boolean;
+//# sourceMappingURL=did-utils.d.ts.map

package/dist/did/did-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-utils.d.ts","sourceRoot":"","sources":["../../src/did/did-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAE/B;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,CAAC,CAAC,EAAE,MAAM,CAAA;IACV,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,GAAG,GAAG,YAAY,GAAG,MAAM,CAiBlE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,GAAG,GAAG,GAAG,CAIrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAOxD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAYlD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzB,OAAO,CAIT"}

package/dist/did/key-manager.d.ts

@@ -0,0 +1,19 @@
+import { KeyStorageProvider } from '../storage';
+export declare class KeyManager {
+    private encryptionKey?;
+    private storageProvider;
+    constructor(password?: string, storageProvider?: KeyStorageProvider);
+    private createDefaultStorageProvider;
+    storeKey(did: string, privateKey: any): Promise<void>;
+    getKey(did: string): Promise<any | null>;
+    deleteKey(did: string): Promise<void>;
+    listDids(): Promise<string[]>;
+    /**
+     * Check if storage is available
+     */
+    isAvailable(): Promise<boolean>;
+    private didFromKeyId;
+    private encrypt;
+    private decrypt;
+}
+//# sourceMappingURL=key-manager.d.ts.map

package/dist/did/key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../src/did/key-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAwB,MAAM,YAAY,CAAA;AAGrE,qBAAa,UAAU;IACrB,OAAO,CAAC,aAAa,CAAC,CAAQ;IAC9B,OAAO,CAAC,eAAe,CAAoB;gBAE/B,QAAQ,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,kBAAkB;IAUnE,OAAO,CAAC,4BAA4B;IAU9B,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAQrD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAYxC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKnC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IASrC,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,OAAO;CAqBhB"}

package/dist/gateway/gateway-client.d.ts

@@ -0,0 +1,103 @@
+import { IStateStore } from '../state/state-store.interface';
+/**
+ * Event returned from the Gateway /events endpoint
+ */
+export interface GatewayEvent {
+    id: string;
+    type: string;
+    source: string;
+    timestamp: string;
+    data: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Response from getEvents
+ */
+export interface GetEventsResponse {
+    events: GatewayEvent[];
+    cursor?: string;
+    hasMore: boolean;
+}
+/**
+ * Response from ackEvent
+ */
+export interface AckEventResponse {
+    success: boolean;
+    eventId: string;
+}
+/**
+ * Options for getEvents
+ */
+export interface GetEventsOptions {
+    cursor?: string;
+    limit?: number;
+    /** Long-poll wait time in seconds (0 = no wait) */
+    waitSeconds?: number;
+}
+/**
+ * Gateway API client for event-based communication.
+ * Used by CLI (runner/daemon) and any other consumer that needs
+ * to long-poll for events and acknowledge them.
+ *
+ * baseUrl should be the API root without trailing path segments
+ * (e.g. "https://api.aidentity.io" or "http://localhost:3000").
+ */
+export declare class GatewayClient {
+    private baseUrl;
+    private stateStore?;
+    private apiKey?;
+    private sessionToken?;
+    constructor(options: {
+        baseUrl: string;
+        stateStore?: IStateStore;
+        apiKey?: string;
+        sessionToken?: string;
+    });
+    /**
+     * Set session token for authenticated requests
+     */
+    setSessionToken(token: string): void;
+    /**
+     * Fetch events from the Gateway.
+     * If cursor is not provided, attempts to load it from StateStore.
+     *
+     * NOTE: The /events long-poll endpoint may not be implemented on the API server yet.
+     * This client is designed to work once the endpoint is available.
+     */
+    getEvents(options?: GetEventsOptions): Promise<GetEventsResponse>;
+    /**
+     * Acknowledge an event (mark as processed).
+     *
+     * NOTE: The /events/:id/ack endpoint may not be implemented on the API server yet.
+     */
+    ackEvent(eventId: string): Promise<AckEventResponse>;
+    /**
+     * Validate an API key against the Gateway.
+     *
+     * @param apiKey       API key to validate
+     * @param projectId    Optional project scope
+     * @param requiredScopes Scopes the caller needs — callers should pass the
+     *                       scopes relevant to their context (e.g. MCP passes
+     *                       ['mcp:tools:*', 'mcp:memory:*']).
+     */
+    validateApiKey(apiKey: string, projectId?: string, requiredScopes?: string[]): Promise<ApiKeyValidationResult>;
+    private buildHeaders;
+}
+/**
+ * Result of API key validation
+ */
+export interface ApiKeyValidationResult {
+    valid: boolean;
+    userId?: string;
+    projectId?: string;
+    scopes?: string[];
+}
+/**
+ * Error class for Gateway API errors
+ */
+export declare class GatewayError extends Error {
+    readonly statusCode: number;
+    readonly responseBody: string;
+    constructor(message: string, statusCode: number, responseBody: string);
+}
+//# sourceMappingURL=gateway-client.d.ts.map

package/dist/gateway/gateway-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-client.d.ts","sourceRoot":"","sources":["../../src/gateway/gateway-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAA;AAE5D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,MAAM,CAAC,CAAQ;IACvB,OAAO,CAAC,YAAY,CAAC,CAAQ;gBAEjB,OAAO,EAAE;QACnB,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,CAAC,EAAE,WAAW,CAAA;QACxB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB;IASD;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIpC;;;;;;OAMG;IACG,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsC3E;;;;OAIG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoB1D;;;;;;;;OAQG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,sBAAsB,CAAC;IAwBlC,OAAO,CAAC,YAAY;CAYrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;aAGnB,UAAU,EAAE,MAAM;aAClB,YAAY,EAAE,MAAM;gBAFpC,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM;CAKvC"}

package/dist/gateway/index.d.ts

@@ -0,0 +1,2 @@
+export { GatewayClient, GatewayError, GatewayEvent, GetEventsResponse, GetEventsOptions, AckEventResponse, ApiKeyValidationResult, } from './gateway-client';
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA"}

package/dist/grant/grant-manager.d.ts

@@ -0,0 +1,140 @@
+import { VPManager } from '../vp/vp-manager';
+import { Grant, GrantStatus, CreateGrantRequest, UpdateGrantRequest, CheckGrantPermissionRequest, CheckGrantPermissionResult } from '../types';
+/**
+ * Grant提案レスポンス
+ */
+export interface GrantSuggestion {
+    id: string;
+    oauthTokenId: string;
+    userId?: string;
+    projectId: string;
+    provider: string;
+    suggestedActions: string[];
+    suggestedResources: Array<{
+        type: string;
+        id?: string;
+        pattern?: string;
+        name?: string;
+    }>;
+    metadata: {
+        providerInfo: any;
+        scopes: string[];
+    };
+    createdAt: string;
+}
+/**
+ * Grant提案確認リクエスト
+ */
+export interface ConfirmGrantRequest {
+    suggestionId: string;
+    selectedActions: string[];
+    selectedResources: Array<{
+        type: string;
+        id?: string;
+        pattern?: string;
+        name?: string;
+        selected: boolean;
+    }>;
+    constraints: {
+        maxInvocations?: number;
+        expiresAt?: string;
+        timeWindow?: {
+            start: string;
+            end: string;
+            timezone: string;
+            daysOfWeek: number[];
+        };
+    };
+    name?: string;
+    description?: string;
+}
+/**
+ * GrantManager
+ * Grants APIを操作するSDKクライアント
+ */
+export declare class GrantManager {
+    constructor(_vpManager: VPManager);
+    /**
+     * Grant提案を取得
+     * @param options - 提案オプション
+     * @param options.oauthTokenId - OAuthトークンID
+     * @param options.userId - 対象ユーザーID
+     * @param options.projectId - プロジェクトID
+     * @param authOptions - 認証オプション（VP or issuerDid）
+     */
+    suggest(options: {
+        oauthTokenId: string;
+        userId: string;
+        projectId: string;
+    }, authOptions: {
+        vpJwt?: string;
+        issuerDid?: string;
+    }): Promise<GrantSuggestion>;
+    /**
+     * Grant提案を確認して作成
+     * @param request - 確認リクエスト
+     * @param authOptions - 認証オプション
+     */
+    confirm(request: ConfirmGrantRequest, authOptions: {
+        vpJwt?: string;
+        issuerDid?: string;
+    }): Promise<Grant>;
+    /**
+     * Grantを直接作成
+     * @param request - Grant作成リクエスト
+     * @param authOptions - 認証オプション
+     */
+    create(request: CreateGrantRequest, authOptions: {
+        vpJwt?: string;
+        issuerDid?: string;
+    }): Promise<Grant>;
+    /**
+     * ユーザー用のGrant一覧を取得
+     * @param userId - ユーザーID
+     * @param status - フィルタするステータス（オプション）
+     */
+    listForUser(userId: string, status?: GrantStatus): Promise<{
+        grants: Grant[];
+        total: number;
+    }>;
+    /**
+     * Issuer用のGrant一覧を取得
+     * @param issuerDid - IssuerのDID
+     * @param status - フィルタするステータス（オプション）
+     */
+    listForIssuer(issuerDid: string, status?: GrantStatus): Promise<{
+        grants: Grant[];
+        total: number;
+    }>;
+    /**
+     * Grantを取得
+     * @param grantId - GrantのID
+     */
+    get(grantId: string): Promise<Grant>;
+    /**
+     * Grantを取り消し
+     * @param grantId - GrantのID
+     * @param reason - 取り消し理由
+     * @param authOptions - 認証オプション
+     */
+    revoke(grantId: string, reason: string, authOptions: {
+        vpJwt?: string;
+        issuerDid?: string;
+    }): Promise<Grant>;
+    /**
+     * Grant権限をチェック
+     * @param request - 権限チェックリクエスト
+     */
+    checkPermission(request: CheckGrantPermissionRequest): Promise<CheckGrantPermissionResult>;
+    /**
+     * Grant更新
+     * @param grantId - GrantのID
+     * @param request - 更新リクエスト
+     * @param authOptions - 認証オプション
+     */
+    update(grantId: string, request: UpdateGrantRequest, authOptions: {
+        vpJwt?: string;
+        issuerDid?: string;
+    }): Promise<Grant>;
+}
+//# sourceMappingURL=grant-manager.d.ts.map

package/dist/grant/grant-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-manager.d.ts","sourceRoot":"","sources":["../../src/grant/grant-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAE5C,OAAO,EACL,KAAK,EACL,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,EAC3B,MAAM,UAAU,CAAA;AAEjB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,kBAAkB,EAAE,KAAK,CAAC;QACxB,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,CAAC,CAAA;IACF,QAAQ,EAAE;QACR,YAAY,EAAE,GAAG,CAAA;QACjB,MAAM,EAAE,MAAM,EAAE,CAAA;KACjB,CAAA;IACD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,iBAAiB,EAAE,KAAK,CAAC;QACvB,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,EAAE,OAAO,CAAA;KAClB,CAAC,CAAA;IACF,WAAW,EAAE;QACX,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE;YACX,KAAK,EAAE,MAAM,CAAA;YACb,GAAG,EAAE,MAAM,CAAA;YACX,QAAQ,EAAE,MAAM,CAAA;YAChB,UAAU,EAAE,MAAM,EAAE,CAAA;SACrB,CAAA;KACF,CAAA;IACD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;GAGG;AACH,qBAAa,YAAY;gBACX,UAAU,EAAE,SAAS;IAIjC;;;;;;;OAOG;IACG,OAAO,CACX,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;KAClB,EACD,WAAW,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,eAAe,CAAC;IA4B3B;;;;OAIG;IACG,OAAO,CACX,OAAO,EAAE,mBAAmB,EAC5B,WAAW,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,KAAK,CAAC;IA4BjB;;;;OAIG;IACG,MAAM,CACV,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,KAAK,CAAC;IA4BjB;;;;OAIG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAuB9C;;;;OAIG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAuB9C;;;OAGG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAkB1C;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,KAAK,CAAC;IA4BjB;;;OAGG;IACG,eAAe,CACnB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC;IAmBtC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,kBAAkB,EAC3B,WAAW,EAAE;QACX,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,KAAK,CAAC;CA2BlB"}

package/dist/grant/index.d.ts

@@ -0,0 +1,2 @@
+export * from './grant-manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/grant/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/grant/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA"}