@vess-id/ai-identity 0.12.0 → 0.14.0-alpha.0

package/dist/index.js

@@ -44,9 +44,12 @@ __export(index_exports, {
   AuthProvider: () => AuthProvider,
   AuthenticationError: () => AuthenticationError,
   CANONICAL_PROVIDERS: () => CANONICAL_PROVIDERS,
+  CedarEngineUnavailableError: () => CedarEngineUnavailableError,
+  CedarParseError: () => CedarParseError,
   ConstraintEvaluator: () => ConstraintEvaluator,
   CredentialStatus: () => CredentialStatus,
   CredentialType: () => CredentialType,
+  DECISION_VALUES: () => DECISION_VALUES,
   DEFAULT_CONSTRAINTS_BY_RISK: () => DEFAULT_CONSTRAINTS_BY_RISK,
   DeviceEnrollManager: () => DeviceEnrollManager,
   DummyCreds: () => DummyCreds,
@@ -68,6 +71,7 @@ __export(index_exports, {
   MemoryKeyStorage: () => MemoryKeyStorage,
   NetworkError: () => NetworkError,
   OAuthProvider: () => OAuthProvider,
+  PHASE_1_VC_LAYER: () => PHASE_1_VC_LAYER,
   PROVIDER_ALIASES: () => PROVIDER_ALIASES,
   REAUTH_REQUIRED_ACTION: () => REAUTH_REQUIRED_ACTION,
   RESOURCE_TYPES: () => RESOURCE_TYPES,
@@ -93,12 +97,17 @@ __export(index_exports, {
   VPManager: () => VPManager,
   WRITE_ACTION_NAMES: () => WRITE_ACTION_NAMES,
   buildCanonicalString: () => buildCanonicalString,
+  buildCedarEntities: () => buildCedarEntities,
   buildGrantIdFields: () => buildGrantIdFields,
   buildKbJwtPayload: () => buildKbJwtPayload,
+  buildPhase1VcClaims: () => buildPhase1VcClaims,
+  buildValidationErrors: () => buildValidationErrors,
   canonicalizeAction: () => canonicalizeAction,
   checkPermissionWithVP: () => checkPermissionWithVP,
+  classifyCedarErrorMessage: () => classifyCedarErrorMessage,
   configure: () => configure,
   createAjv: () => createAjv,
+  createCedarEngine: () => createCedarEngine,
   createDidJwk: () => createDidJwk,
   credentialStatusToVCStatus: () => credentialStatusToVCStatus,
   defaultConstraintEvaluator: () => defaultConstraintEvaluator,
@@ -127,6 +136,9 @@ __export(index_exports, {
   indexCapabilities: () => indexCapabilities,
   isActionEquivalent: () => isActionEquivalent,
   isCanonicalProvider: () => isCanonicalProvider,
+  isDecision: () => isDecision,
+  isPolicyRefInline: () => isPolicyRefInline,
+  isPolicyRefReference: () => isPolicyRefReference,
   isUnlimited: () => isUnlimited,
   isValidDidJwk: () => isValidDidJwk,
   isValidProvider: () => isValidProvider,
@@ -141,6 +153,7 @@ __export(index_exports, {
   planDelegationForVC: () => planDelegationForVC,
   publicKeysMatch: () => publicKeysMatch,
   readVcExpSeconds: () => readVcExpSeconds,
+  resolveActionRisk: () => resolveActionRisk,
   resolveActionsFromSelection: () => resolveActionsFromSelection,
   resolveProvider: () => resolveProvider,
   resolveResourceType: () => resolveResourceType,
@@ -2831,6 +2844,12 @@ var NetworkError = class extends AIdentityError {
 };
 
 // src/types/permission-vc.ts
+function isPolicyRefInline(ref) {
+  return ref.mode === "inline";
+}
+function isPolicyRefReference(ref) {
+  return ref.mode === "reference";
+}
 function buildGrantIdFields(grantIds) {
   if (grantIds.length === 0) {
     throw new Error("grantIds must contain at least one element");
@@ -2870,6 +2889,10 @@ function parseGrantAction(grantAction) {
   }
   return { provider: "*", action: grantAction };
 }
+var PHASE_1_VC_LAYER = "agent_permission";
+function buildPhase1VcClaims(base) {
+  return { ...base, layer: PHASE_1_VC_LAYER };
+}
 
 // src/types/grant.ts
 var GrantStatus = /* @__PURE__ */ ((GrantStatus2) => {
@@ -3085,7 +3108,9 @@ var DEFAULT_CONSTRAINTS_BY_RISK = {
 var TIER_LIMITS = {
   free: {
     maxProjects: 1,
-    maxWritesPerMonth: 50,
+    // GTM doc §3 Tier 構成: Free = 100 writes/月. Raised from 50 to 100
+    // (2026-05-14 tier drift fix) so Aha 到達前にユーザーを枯渇させない。
+    maxWritesPerMonth: 100,
     maxWriteVcTtlMinutes: 5,
     readAutoApproveMaxRiskLevel: "low",
     readAutoApproveTtlMinutes: 30,
@@ -3095,7 +3120,10 @@ var TIER_LIMITS = {
   },
   pro: {
     maxProjects: 3,
-    maxWritesPerMonth: 300,
+    // GTM doc §3 Tier 構成: Pro = 2,000 writes/月. Raised from 300 to 2,000
+    // (2026-05-14 tier drift fix) — backend was 6.7x below the published GTM
+    // commitment. Overage billing ($0.07 / action) kicks in beyond 2,000.
+    maxWritesPerMonth: 2e3,
     maxWriteVcTtlMinutes: 1440,
     // 24h
     readAutoApproveMaxRiskLevel: "medium",
@@ -3109,14 +3137,21 @@ var TIER_LIMITS = {
   team: {
     maxProjects: -1,
     // unlimited
+    // GTM doc §3 Tier 構成: Team = 10,000 writes/月 (team 合計). Per-user
+    // enforcement is intentionally unlimited (-1) in M1 Closed Beta; the
+    // team-aggregate 10K cap is deferred to M2 (requires team-scoped quota
+    // ledger). Documented in GTM doc §3 annotation.
     maxWritesPerMonth: -1,
-    // unlimited (fair use)
+    // unlimited (M1 fair use; M2 enforces 10K team total)
     maxWriteVcTtlMinutes: 10080,
     // 168h
     readAutoApproveMaxRiskLevel: "medium",
     readAutoApproveTtlMinutes: 10080,
     // 168h
     writeAutoApproveEnabled: true,
+    // GTM doc §3 commits to 90-day audit retention for Team; implementation
+    // exceeds this with 365 days as a customer-favorable bonus (documented
+    // in GTM doc §3 annotation).
     auditRetentionDays: 365,
     auditExportEnabled: true
   }
@@ -4036,7 +4071,7 @@ var actionMetaSchema = {
   $id: "https://vess.ai/schemas/action-meta.json",
   type: "object",
   additionalProperties: false,
-  required: ["action", "resource_type", "required_relations", "required_scopes", "version"],
+  required: ["action", "resource_type", "required_relations", "required_scopes", "risk", "version"],
   properties: {
     action: { type: "string", minLength: 1 },
     resource_type: {
@@ -4676,7 +4711,7 @@ var ACTION_REGISTRY = {
       },
       constraints: { rate_bucket: "github.write" },
       effects: ["Create:Issue"],
-      risk: "medium",
+      risk: "high",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
@@ -4751,7 +4786,7 @@ var ACTION_REGISTRY = {
       },
       constraints: { rate_bucket: "github.write" },
       effects: ["Update:Issue"],
-      risk: "medium",
+      risk: "high",
       target_bindings: {
         resource_id: { source: "context", key: "resource_id" }
       },
@@ -5093,7 +5128,7 @@ var ACTION_REGISTRY = {
       },
       constraints: { rate_bucket: "calendar.write" },
       effects: ["Update:Event"],
-      risk: "medium",
+      risk: "high",
       target_bindings: {
         resource_id: { source: "param", param: "calendarId", default: "primary" },
         secondary: [
@@ -5475,6 +5510,80 @@ var ACTION_REGISTRY = {
       },
       version: "1.0.0"
     },
+    {
+      action: "jira.issuelink.create",
+      resource_type: "jira:project",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["write:jira-work"],
+      capability: "jira.write.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          typeName: { type: "string", minLength: 1, description: "Link type name (e.g. Blocks, Relates)" },
+          inwardIssueKey: { type: "string", minLength: 1 },
+          outwardIssueKey: { type: "string", minLength: 1 },
+          commentBody: { type: "string" }
+        },
+        required: ["typeName", "inwardIssueKey", "outwardIssueKey"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "jira.write" },
+      effects: ["Create:IssueLink"],
+      risk: "high",
+      target_bindings: {
+        // 両 issue が touch されるが target_bindings は 1 つしか指定できないので
+        // outwardIssueKey を主 binding として project_key を導出する。
+        // 完全な制御をしたい場合は別途 inwardIssueKey 側も grant チェックする運用を要する。
+        resource_id: { source: "param", param: "outwardIssueKey", derive: "project_key" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "jira.issuelink.delete",
+      resource_type: "jira:issuelink",
+      required_relations: ["editor", "act_as"],
+      required_scopes: ["write:jira-work"],
+      capability: "jira.write.basic",
+      input_schema: {
+        type: "object",
+        properties: {
+          linkId: { type: "string", minLength: 1, description: "Internal id of the issue link (from jira.issue.read fields.issuelinks[].id)" }
+        },
+        required: ["linkId"],
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "jira.write" },
+      effects: ["Delete:IssueLink"],
+      risk: "high",
+      target_bindings: {
+        resource_id: { source: "param", param: "linkId" }
+      },
+      version: "1.0.0"
+    },
+    {
+      action: "jira.issuelinktype.list",
+      // workspace 全体のメタデータ取得なので、jira.project.read と同様 jira:project
+      // resource として扱い、特定 project を要求しないことで全 viewer に許可する。
+      resource_type: "jira:project",
+      required_relations: ["viewer", "editor", "admin", "owner"],
+      required_scopes: ["read:jira-work"],
+      capability: "jira.read.basic",
+      input_schema: {
+        type: "object",
+        properties: {},
+        additionalProperties: false
+      },
+      constraints: { rate_bucket: "jira.read" },
+      effects: ["Read:IssueLinkTypes"],
+      risk: "low",
+      // workspace 全体のメタデータなので resource_id は常に未解決のまま
+      // type-only match で評価する (required: false がその挙動)。input_schema には
+      // 該当 param が無いため param 値は実行時に必ず undefined になる。
+      target_bindings: {
+        resource_id: { source: "param", param: "projectKeyOrId", required: false }
+      },
+      version: "1.0.0"
+    },
     // ─── OS Actions (Local) ───
     {
       action: "os.secret.read",
@@ -5611,14 +5720,14 @@ var ACTION_REGISTRY = {
     },
     {
       capability: "jira.read.basic",
-      description: "Read Jira issues, projects, boards, and sprints",
-      includes: ["jira.project.read", "jira.board.read", "jira.sprint.read", "jira.issue.list", "jira.issue.search", "jira.worklog.read", "jira.issue.read", "jira.batch.read", "jira.comment.read", "jira.transition.list"],
+      description: "Read Jira issues, projects, boards, sprints, and issue link types",
+      includes: ["jira.project.read", "jira.board.read", "jira.sprint.read", "jira.issue.list", "jira.issue.search", "jira.worklog.read", "jira.issue.read", "jira.batch.read", "jira.comment.read", "jira.transition.list", "jira.issuelinktype.list"],
       version: "1.0.0"
     },
     {
       capability: "jira.write.basic",
-      description: "Create, update, and delete Jira issues",
-      includes: ["jira.issue.create", "jira.issue.update", "jira.issue.delete", "jira.comment.create", "jira.issue.transition"],
+      description: "Create, update, delete Jira issues, and manage issue links",
+      includes: ["jira.issue.create", "jira.issue.update", "jira.issue.delete", "jira.comment.create", "jira.issue.transition", "jira.issuelink.create", "jira.issuelink.delete"],
       version: "1.0.0"
     }
   ]
@@ -5795,6 +5904,46 @@ var GATEWAY_ERROR_CODE = {
 };
 
 // src/registry/action-summary.ts
+function extractJiraAssigneeDisplay(params) {
+  const pickFromShape = (value) => {
+    if (value === null) return null;
+    if (typeof value === "string") return value.length > 0 ? value : void 0;
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+      const id = value.accountId;
+      if (id === null) return null;
+      if (typeof id === "string" && id.length > 0) return id;
+    }
+    return void 0;
+  };
+  if ("assigneeAccountId" in params) {
+    const v = params.assigneeAccountId;
+    if (v === null) return null;
+    if (typeof v === "string" && v.length > 0) return v;
+  }
+  if ("assignee" in params) {
+    const picked = pickFromShape(params.assignee);
+    if (picked !== void 0) return picked;
+  }
+  const fields = params.fields;
+  if (fields && typeof fields === "object" && "assignee" in fields) {
+    const picked = pickFromShape(fields.assignee);
+    if (picked !== void 0) return picked;
+  }
+  return void 0;
+}
+function jiraField(params, topLevelKeys, nestedKey, nestedExtractor) {
+  for (const k of topLevelKeys) {
+    if (params[k] !== void 0 && params[k] !== null) return params[k];
+  }
+  const fields = params.fields;
+  if (fields && typeof fields === "object") {
+    const v = fields[nestedKey];
+    if (v !== void 0 && v !== null) {
+      return nestedExtractor ? nestedExtractor(v) : v;
+    }
+  }
+  return void 0;
+}
 var ACTION_DISPLAY_CONFIGS = {
   "slack.message.post": {
     summaryTemplate: (p) => {
@@ -5865,28 +6014,105 @@ var ACTION_DISPLAY_CONFIGS = {
   "jira.issue.create": {
     summaryTemplate: (p) => {
       const parts = [];
-      if (p.project) parts.push(`${p.project}:`);
-      if (p.summary) parts.push(p.summary);
+      const projectKey = jiraField(
+        p,
+        ["projectKey", "project"],
+        "project",
+        (v) => typeof v === "string" ? v : v?.key
+      );
+      const summary = jiraField(p, ["summary"], "summary");
+      if (projectKey) parts.push(`${projectKey}:`);
+      if (summary) parts.push(summary);
       return parts.join(" ");
     },
+    // AIDENTITY-54: nested `fields.X` 形式と top-level canonical の両方を
+    // 拾えるよう extract を使う。assignee は null (unassign) も表示。
+    // legacy alias (project / issuetype 等) も top-level 候補に含めて後方互換を保つ。
     displayFields: [
-      { key: "project", label: "Project" },
-      { key: "issuetype", label: "Type" },
-      { key: "summary", label: "Summary" },
-      { key: "description", label: "Description" }
+      {
+        label: "Project",
+        extract: (p) => jiraField(
+          p,
+          ["projectKey", "project"],
+          "project",
+          (v) => typeof v === "string" ? v : v?.key
+        )
+      },
+      {
+        label: "Type",
+        extract: (p) => jiraField(
+          p,
+          ["issueTypeName", "issueType", "issuetype"],
+          "issuetype",
+          (v) => typeof v === "string" ? v : v?.name
+        )
+      },
+      { label: "Summary", extract: (p) => jiraField(p, ["summary"], "summary") },
+      { label: "Description", extract: (p) => jiraField(p, ["description"], "description") },
+      {
+        label: "Priority",
+        extract: (p) => jiraField(
+          p,
+          ["priority"],
+          "priority",
+          (v) => typeof v === "string" ? v : v?.name
+        )
+      },
+      { label: "Assignee", extract: extractJiraAssigneeDisplay },
+      { label: "Labels", extract: (p) => jiraField(p, ["labels"], "labels") }
     ]
   },
   "jira.issue.update": {
     summaryTemplate: (p) => {
       const parts = [];
-      if (p.issueKey) parts.push(`${p.issueKey}:`);
-      if (p.summary) parts.push(p.summary);
+      const key = p.issueIdOrKey ?? p.issueKey;
+      const summary = jiraField(p, ["summary"], "summary");
+      if (key) parts.push(`${key}:`);
+      if (summary) parts.push(summary);
       return parts.join(" ");
     },
     displayFields: [
-      { key: "issueKey", label: "Issue" },
-      { key: "summary", label: "Summary" },
-      { key: "description", label: "Description" }
+      // canonical は issueIdOrKey、agent が issueKey で送ってくる旧仕様も拾う。
+      { label: "Issue", extract: (p) => p.issueIdOrKey ?? p.issueKey },
+      { label: "Summary", extract: (p) => jiraField(p, ["summary"], "summary") },
+      { label: "Description", extract: (p) => jiraField(p, ["description"], "description") },
+      {
+        label: "Priority",
+        extract: (p) => jiraField(
+          p,
+          ["priority"],
+          "priority",
+          (v) => typeof v === "string" ? v : v?.name
+        )
+      },
+      // AIDENTITY-54: top-level alias (string / object) と null (unassign) も解決。
+      { label: "Assignee", extract: extractJiraAssigneeDisplay },
+      { label: "Labels", extract: (p) => jiraField(p, ["labels"], "labels") }
+    ]
+  },
+  // AIDENTITY-65: comment 本体は string と ADF document の両方を受けるため、
+  // formatValue 側の ADF ハンドリング (extractFirstAdfText) に任せて key 指定で OK。
+  "jira.comment.create": {
+    summaryTemplate: (p) => {
+      const parts = [];
+      if (p.issueIdOrKey) parts.push(`${p.issueIdOrKey}:`);
+      if (p.body) parts.push(typeof p.body === "string" ? p.body : "[ADF]");
+      return parts.join(" ");
+    },
+    displayFields: [
+      { key: "issueIdOrKey", label: "Issue" },
+      { key: "body", label: "Comment" }
+    ]
+  },
+  // AIDENTITY-65: API enricher が 'Link' label を upsert で書き換える。
+  "jira.issuelink.delete": {
+    summaryTemplate: (p) => {
+      const parts = [];
+      if (p.linkId) parts.push(`Delete link ${p.linkId}`);
+      return parts.join(" ");
+    },
+    displayFields: [
+      { key: "linkId", label: "Link" }
     ]
   }
 };
@@ -5895,7 +6121,8 @@ function truncate(text, maxLength) {
   return text.slice(0, maxLength - 3) + "...";
 }
 function formatValue(value) {
-  if (value === null || value === void 0) return "";
+  if (value === void 0) return "";
+  if (value === null) return "(unset)";
   if (Array.isArray(value)) {
     return value.map((item) => {
       if (item && typeof item === "object") {
@@ -5912,10 +6139,35 @@ function formatValue(value) {
       return obj.timeZone ? `${obj.dateTime} (${obj.timeZone})` : String(obj.dateTime);
     }
     if (obj.date) return String(obj.date);
+    if (obj.type === "doc" && Array.isArray(obj.content)) {
+      const firstText = extractFirstAdfText(obj.content);
+      if (firstText) {
+        const moreCount = obj.content.length - 1;
+        const more = moreCount > 0 ? ` \u2026 (+${moreCount} block${moreCount > 1 ? "s" : ""})` : "";
+        return `${firstText}${more}`;
+      }
+      return "(ADF document)";
+    }
     return JSON.stringify(value);
   }
   return String(value);
 }
+function extractFirstAdfText(nodes) {
+  for (const node of nodes) {
+    if (!node || typeof node !== "object") continue;
+    const n = node;
+    if (n.type === "paragraph" || n.type === "heading") {
+      const inner = n.content ?? [];
+      for (const child of inner) {
+        if (child && typeof child === "object") {
+          const c = child;
+          if (c.type === "text" && typeof c.text === "string") return c.text;
+        }
+      }
+    }
+  }
+  return "";
+}
 var ACTION_PARAMS_MAX_SIZE = 1e4;
 function generateActionSummary(action, params, maxLength = 50) {
   if (!params || Object.keys(params).length === 0) return "";
@@ -5935,10 +6187,10 @@ function generateActionParamsDisplay(action, params) {
   if (!params || Object.keys(params).length === 0) return [];
   const config = ACTION_DISPLAY_CONFIGS[action];
   if (config) {
-    return config.displayFields.filter((f) => params[f.key] !== void 0 && params[f.key] !== null).map((f) => ({
-      label: f.label,
-      value: formatValue(params[f.key])
-    }));
+    return config.displayFields.map((f) => {
+      const raw = f.extract ? f.extract(params) : f.key ? params[f.key] : void 0;
+      return { label: f.label, raw };
+    }).filter((item) => item.raw !== void 0).map((item) => ({ label: item.label, value: formatValue(item.raw) }));
   }
   return Object.entries(params).filter(([, v]) => v !== void 0 && v !== null).slice(0, 3).map(([key, val]) => ({
     label: key,
@@ -6112,6 +6364,285 @@ function assertKeyMaterial(k) {
   }
 }
 
+// src/policy/cedar-engine.ts
+var CedarEngineUnavailableError = class extends Error {
+  name = "CedarEngineUnavailableError";
+  constructor(cause) {
+    super(
+      "Cedar wasm engine could not be loaded. This typically happens in non-Node environments (browser) or when the @cedar-policy/cedar-wasm/nodejs module fails to instantiate.",
+      { cause }
+    );
+  }
+};
+var CedarParseError = class extends Error {
+  name = "CedarParseError";
+  errors;
+  /**
+   * Structured diagnostics with `{ code, message, line, column, context,
+   * offset }`. Always non-empty when the throw is from cedar-wasm; may
+   * be empty when constructed from a non-cedar-wasm path (e.g. when an
+   * upstream caller wraps an unexpected throw).
+   */
+  validationErrors;
+  constructor(message, errors, validationErrors = []) {
+    super(message);
+    this.errors = errors;
+    this.validationErrors = validationErrors;
+  }
+};
+var defaultLoader = async () => (
+  // Dynamic import keeps browser bundlers from inlining the Node-only subpath.
+  // The cast widens the upstream module to our minimal surface above; we don't
+  // re-export the upstream types.
+  await import("@cedar-policy/cedar-wasm/nodejs")
+);
+var activeLoader = defaultLoader;
+var enginePromise = null;
+async function createCedarEngine() {
+  if (enginePromise) return enginePromise;
+  const inFlight = doCreateCedarEngine(activeLoader).catch((err) => {
+    if (enginePromise === inFlight) {
+      enginePromise = null;
+    }
+    throw err;
+  });
+  enginePromise = inFlight;
+  return enginePromise;
+}
+async function doCreateCedarEngine(loader) {
+  let mod;
+  try {
+    mod = await loader();
+  } catch (err) {
+    throw new CedarEngineUnavailableError(err);
+  }
+  let handleCounter = 0;
+  const nextId = (kind) => `${kind}-${++handleCounter}-${Date.now().toString(36)}`;
+  const adapter = {
+    preparseSchema(schemaText) {
+      const name = nextId("schema");
+      const ans = mod.preparseSchema(name, schemaText);
+      if (ans.type === "failure") {
+        throw new CedarParseError(
+          `Failed to parse Cedar schema: ${ans.errors[0]?.message ?? "unknown error"}`,
+          ans.errors.map(toCedarError),
+          buildValidationErrors(ans.errors, schemaText)
+        );
+      }
+      return { __cedar: "schema", name };
+    },
+    preparsePolicySet(cedarText) {
+      const id = nextId("pset");
+      const ans = mod.preparsePolicySet(id, { staticPolicies: cedarText });
+      if (ans.type === "failure") {
+        throw new CedarParseError(
+          `Failed to parse Cedar PolicySet: ${ans.errors[0]?.message ?? "unknown error"}`,
+          ans.errors.map(toCedarError),
+          buildValidationErrors(ans.errors, cedarText)
+        );
+      }
+      return { __cedar: "policySet", id };
+    },
+    evaluate(input) {
+      const call = {
+        principal: parseEntityUid(input.request.principal),
+        action: parseEntityUid(input.request.action),
+        resource: parseEntityUid(input.request.resource),
+        context: input.request.context ?? {},
+        preparsedPolicySetId: input.policySetHandle.id,
+        entities: input.entities
+      };
+      if (input.schemaHandle) {
+        call.preparsedSchemaName = input.schemaHandle.name;
+        call.validateRequest = true;
+      }
+      const ans = mod.statefulIsAuthorized(call);
+      if (ans.type === "failure") {
+        return {
+          decision: "Deny",
+          reasons: [],
+          errors: ans.errors.map(toCedarError)
+        };
+      }
+      return {
+        decision: ans.response.decision === "allow" ? "Allow" : "Deny",
+        reasons: ans.response.diagnostics.reason ?? [],
+        errors: (ans.response.diagnostics.errors ?? []).map((e) => ({
+          policyId: e.policyId,
+          message: e.error.message,
+          code: e.error.code ?? void 0
+        }))
+      };
+    }
+  };
+  return adapter;
+}
+function toCedarError(e) {
+  return {
+    message: e.message,
+    code: e.code ?? void 0
+  };
+}
+function buildValidationErrors(errors, sourceText) {
+  const out = [];
+  const MAX_DEPTH = 10;
+  const visit = (e, depth) => {
+    if (depth >= MAX_DEPTH) return;
+    const code = classifyCedarErrorMessage(e.message, e.code ?? void 0);
+    const loc = (e.sourceLocations ?? []).find(
+      (l) => typeof l?.start === "number"
+    );
+    const offset = typeof loc?.start === "number" ? loc.start : void 0;
+    const end = typeof loc?.end === "number" ? loc.end : void 0;
+    const lc = offset !== void 0 ? offsetToLineColumn(sourceText, offset) : null;
+    const context = offset !== void 0 && end !== void 0 && end > offset ? truncateContext(sourceText.slice(offset, end)) : void 0;
+    out.push({
+      code,
+      message: e.message,
+      ...lc ? { line: lc.line, column: lc.column } : {},
+      ...context !== void 0 ? { context } : {},
+      ...offset !== void 0 ? { offset } : {}
+    });
+    if (e.related && Array.isArray(e.related)) {
+      for (const child of e.related) visit(child, depth + 1);
+    }
+  };
+  for (const e of errors) visit(e, 0);
+  return out;
+}
+function classifyCedarErrorMessage(message, cedarCode) {
+  if (cedarCode && cedarCode.length > 0) return cedarCode;
+  const m = message.toLowerCase();
+  if (m.includes("unexpected end of input")) return "unexpected_end_of_input";
+  if (m.includes("unexpected token")) return "unexpected_token";
+  if (m.includes("unknown extension")) return "unknown_extension";
+  if (m.includes("failed to parse")) return "parse_error";
+  return "unknown";
+}
+function offsetToLineColumn(text, offset) {
+  const safe = Math.max(0, Math.min(offset, text.length));
+  let line = 1;
+  let lineStart = 0;
+  for (let i = 0; i < safe; i++) {
+    if (text.charCodeAt(i) === 10) {
+      line += 1;
+      lineStart = i + 1;
+    }
+  }
+  return { line, column: safe - lineStart + 1 };
+}
+function truncateContext(slice) {
+  const max = 200;
+  if (slice.length <= max) return slice;
+  return slice.slice(0, max - 1) + "\u2026";
+}
+var ENTITY_UID_PATTERN = /^([A-Za-z_]\w*(?:::[A-Za-z_]\w*)*)::"((?:[^"\\]|\\.)*)"$/;
+function parseEntityUid(uid) {
+  const m = uid.match(ENTITY_UID_PATTERN);
+  if (!m) {
+    throw new Error(
+      `Invalid Cedar entity uid expression: ${JSON.stringify(uid)}. Expected form: Type::"id" (e.g. Agent::"agent-1").`
+    );
+  }
+  return {
+    type: m[1],
+    // Unescape standard Cedar string escapes (\" → ").
+    id: m[2].replace(/\\(.)/g, "$1")
+  };
+}
+
+// src/registry/action-risk.ts
+var HIGH_RISK_SUFFIXES = /* @__PURE__ */ new Set([
+  "send",
+  "post",
+  "create",
+  "update",
+  "delete",
+  "remove",
+  "write",
+  "modify",
+  "upload",
+  "invite",
+  "archive",
+  "unarchive",
+  "kick",
+  "rename",
+  "patch",
+  "put"
+]);
+var LOW_RISK_SUFFIXES = /* @__PURE__ */ new Set([
+  "read",
+  "list",
+  "get",
+  "search",
+  "find",
+  "lookup",
+  "show",
+  "view",
+  "fetch",
+  "history",
+  "info"
+]);
+var REGISTRY_RISK_BY_ACTION = (() => {
+  const map = /* @__PURE__ */ new Map();
+  for (const entry of ACTION_REGISTRY.actions) {
+    if (typeof entry.action === "string" && typeof entry.risk === "string") {
+      map.set(entry.action.toLowerCase(), entry.risk);
+    }
+  }
+  return map;
+})();
+function resolveActionRiskBySuffix(lowerAction) {
+  const segments = lowerAction.split(".");
+  const last = segments[segments.length - 1] ?? "";
+  if (!last) return "medium";
+  if (HIGH_RISK_SUFFIXES.has(last)) return "high";
+  if (LOW_RISK_SUFFIXES.has(last)) return "low";
+  return "medium";
+}
+function resolveActionRisk(action) {
+  if (!action || typeof action !== "string") return "medium";
+  const lower = action.toLowerCase();
+  const registryRisk = REGISTRY_RISK_BY_ACTION.get(lower);
+  if (registryRisk) return registryRisk;
+  return resolveActionRiskBySuffix(lower);
+}
+
+// src/policy/cedar-entities.ts
+function buildCedarEntities(input) {
+  const { principal, action, resource } = input;
+  const principalEntity = {
+    uid: { type: principal.type, id: principal.id },
+    attrs: principal.attrs ?? {},
+    parents: []
+  };
+  const actionEntity = {
+    uid: { type: "Action", id: action },
+    attrs: { risk_level: resolveActionRisk(action) },
+    parents: []
+  };
+  const resourceEntity = {
+    uid: { type: resource.type, id: resource.id },
+    attrs: resource.attrs ?? {},
+    parents: []
+  };
+  return [principalEntity, actionEntity, resourceEntity];
+}
+
+// src/policy/decision.ts
+var DECISION_VALUES = [
+  "permit",
+  "auth_required",
+  "input_required",
+  "denied",
+  "denied_default",
+  "denied_by_user",
+  "indeterminate"
+];
+function isDecision(value) {
+  return typeof value === "string" && DECISION_VALUES.includes(value);
+}
+
 // src/index.ts
 var version = "0.0.1";
 // Annotate the CommonJS export names for ESM import in node:
@@ -6130,9 +6661,12 @@ var version = "0.0.1";
   AuthProvider,
   AuthenticationError,
   CANONICAL_PROVIDERS,
+  CedarEngineUnavailableError,
+  CedarParseError,
   ConstraintEvaluator,
   CredentialStatus,
   CredentialType,
+  DECISION_VALUES,
   DEFAULT_CONSTRAINTS_BY_RISK,
   DeviceEnrollManager,
   DummyCreds,
@@ -6154,6 +6688,7 @@ var version = "0.0.1";
   MemoryKeyStorage,
   NetworkError,
   OAuthProvider,
+  PHASE_1_VC_LAYER,
   PROVIDER_ALIASES,
   REAUTH_REQUIRED_ACTION,
   RESOURCE_TYPES,
@@ -6179,12 +6714,17 @@ var version = "0.0.1";
   VPManager,
   WRITE_ACTION_NAMES,
   buildCanonicalString,
+  buildCedarEntities,
   buildGrantIdFields,
   buildKbJwtPayload,
+  buildPhase1VcClaims,
+  buildValidationErrors,
   canonicalizeAction,
   checkPermissionWithVP,
+  classifyCedarErrorMessage,
   configure,
   createAjv,
+  createCedarEngine,
   createDidJwk,
   credentialStatusToVCStatus,
   defaultConstraintEvaluator,
@@ -6213,6 +6753,9 @@ var version = "0.0.1";
   indexCapabilities,
   isActionEquivalent,
   isCanonicalProvider,
+  isDecision,
+  isPolicyRefInline,
+  isPolicyRefReference,
   isUnlimited,
   isValidDidJwk,
   isValidProvider,
@@ -6227,6 +6770,7 @@ var version = "0.0.1";
   planDelegationForVC,
   publicKeysMatch,
   readVcExpSeconds,
+  resolveActionRisk,
   resolveActionsFromSelection,
   resolveProvider,
   resolveResourceType,