@vorionsys/atsf-core 0.1.0 → 0.2.1

package/dist/phase6/context.d.ts

@@ -0,0 +1,207 @@
+/**
+ * Q2: Hierarchical Context System
+ *
+ * Implements 4-Tier Context with Tiered Immutability:
+ * - Tier 1: Deployment Context (IMMUTABLE - set at deployment)
+ * - Tier 2: Organizational Context (LOCKED POST-STARTUP)
+ * - Tier 3: Agent Context (FROZEN AT CREATION)
+ * - Tier 4: Operation Context (EPHEMERAL - per-request)
+ *
+ * Key Features:
+ * - Cryptographic hash chain for integrity verification
+ * - Parent chain validation (each tier references parent)
+ * - Ceiling inheritance (child cannot exceed parent)
+ * - Regulatory framework propagation
+ *
+ * @packageDocumentation
+ */
+import { type DeploymentContext, type OrganizationalContext, type OrganizationalConstraints, type AgentContext, type OperationContext, type ContextValidationResult, ContextType, TrustTier, RegulatoryFramework } from './types.js';
+/**
+ * Input for creating deployment context
+ */
+export interface CreateDeploymentContextInput {
+    deploymentId: string;
+    regulatoryFramework: RegulatoryFramework;
+    maxAllowedTier: TrustTier;
+    allowedContextTypes: ContextType[];
+    deployedBy: string;
+}
+/**
+ * Create an immutable deployment context
+ * Once created, this cannot be modified without redeployment.
+ */
+export declare function createDeploymentContext(input: CreateDeploymentContextInput): Promise<DeploymentContext>;
+/**
+ * Verify deployment context integrity
+ */
+export declare function verifyDeploymentContext(context: DeploymentContext): Promise<{
+    valid: boolean;
+    reason?: string;
+}>;
+/**
+ * Input for creating organizational context
+ */
+export interface CreateOrganizationalContextInput {
+    orgId: string;
+    tenantId: string;
+    parentDeployment: DeploymentContext;
+    constraints: Omit<OrganizationalConstraints, 'maxTrustTier'> & {
+        maxTrustTier?: TrustTier;
+    };
+}
+/**
+ * Builder for organizational context
+ * Allows configuration during startup, then locks.
+ */
+export declare class OrganizationalContextBuilder {
+    private context;
+    private locked;
+    constructor(input: CreateOrganizationalContextInput);
+    /**
+     * Update constraints (only allowed before locking)
+     */
+    updateConstraints(updates: Partial<OrganizationalConstraints>): this;
+    /**
+     * Add denied domain
+     */
+    addDeniedDomain(domain: string): this;
+    /**
+     * Add required attestation
+     */
+    addRequiredAttestation(attestation: string): this;
+    /**
+     * Lock the organizational context (no further modifications allowed)
+     */
+    lock(): Promise<OrganizationalContext>;
+    /**
+     * Check if context is locked
+     */
+    isLocked(): boolean;
+}
+/**
+ * Create and immediately lock organizational context
+ */
+export declare function createOrganizationalContext(input: CreateOrganizationalContextInput): Promise<OrganizationalContext>;
+/**
+ * Verify organizational context integrity
+ */
+export declare function verifyOrganizationalContext(context: OrganizationalContext): Promise<{
+    valid: boolean;
+    reason?: string;
+}>;
+/**
+ * Input for creating agent context
+ */
+export interface CreateAgentContextInput {
+    agentId: string;
+    parentOrg: OrganizationalContext;
+    contextType: ContextType;
+    createdBy: string;
+}
+/**
+ * Create an agent context (frozen at creation)
+ * Once created, this cannot be modified for the lifetime of the agent.
+ */
+export declare function createAgentContext(input: CreateAgentContextInput): Promise<AgentContext>;
+/**
+ * Verify agent context integrity
+ */
+export declare function verifyAgentContext(context: AgentContext): Promise<{
+    valid: boolean;
+    reason?: string;
+}>;
+/**
+ * Get the effective ceiling for an agent context
+ * Considers: deployment ceiling, org ceiling, and context type ceiling
+ */
+export declare function getAgentContextCeiling(context: AgentContext): number;
+/**
+ * Input for creating operation context
+ */
+export interface CreateOperationContextInput {
+    parentAgent: AgentContext;
+    requestMetadata?: Record<string, unknown>;
+    ttlMs?: number;
+}
+/**
+ * Create an ephemeral operation context
+ * Automatically expires after TTL.
+ */
+export declare function createOperationContext(input: CreateOperationContextInput): Promise<OperationContext>;
+/**
+ * Check if operation context is expired
+ */
+export declare function isOperationExpired(context: OperationContext): boolean;
+/**
+ * Get the effective ceiling for an operation
+ * Inherits from agent context ceiling
+ */
+export declare function getOperationCeiling(context: OperationContext): number;
+/**
+ * Validate entire context hierarchy from operation to deployment
+ */
+export declare function validateContextChain(context: OperationContext | AgentContext | OrganizationalContext | DeploymentContext): Promise<ContextValidationResult>;
+/**
+ * Service for managing the 4-tier context hierarchy
+ */
+export declare class ContextService {
+    private deployments;
+    private organizations;
+    private agents;
+    private activeOperations;
+    /**
+     * Register a deployment context
+     */
+    registerDeployment(context: DeploymentContext): void;
+    /**
+     * Register an organizational context
+     */
+    registerOrganization(context: OrganizationalContext): void;
+    /**
+     * Register an agent context
+     */
+    registerAgent(context: AgentContext): void;
+    /**
+     * Create and register an operation context
+     */
+    createOperation(input: CreateOperationContextInput): Promise<OperationContext>;
+    /**
+     * Complete an operation (removes from active)
+     */
+    completeOperation(operationId: string): void;
+    /**
+     * Get deployment by ID
+     */
+    getDeployment(deploymentId: string): DeploymentContext | undefined;
+    /**
+     * Get organization by ID
+     */
+    getOrganization(orgId: string): OrganizationalContext | undefined;
+    /**
+     * Get agent by ID
+     */
+    getAgent(agentId: string): AgentContext | undefined;
+    /**
+     * Get active operation by ID
+     */
+    getOperation(operationId: string): OperationContext | undefined;
+    /**
+     * Cleanup expired operations
+     */
+    cleanupExpiredOperations(): number;
+    /**
+     * Get statistics
+     */
+    getStats(): {
+        deployments: number;
+        organizations: number;
+        agents: number;
+        activeOperations: number;
+    };
+}
+/**
+ * Create a new context service instance
+ */
+export declare function createContextService(): ContextService;
+export { type DeploymentContext, type OrganizationalContext, type OrganizationalConstraints, type AgentContext, type OperationContext, type ContextValidationResult, ContextType, TrustTier, RegulatoryFramework, CONTEXT_CEILINGS, } from './types.js';
+//# sourceMappingURL=context.d.ts.map

package/dist/phase6/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/phase6/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,WAAW,EACX,SAAS,EACT,mBAAmB,EAMpB,MAAM,YAAY,CAAC;AAoCpB;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,cAAc,EAAE,SAAS,CAAC;IAC1B,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,iBAAiB,CAAC,CA2C5B;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB9C;AAMD;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,WAAW,EAAE,IAAI,CAAC,yBAAyB,EAAE,cAAc,CAAC,GAAG;QAC7D,YAAY,CAAC,EAAE,SAAS,CAAC;KAC1B,CAAC;CACH;AAED;;;GAGG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,MAAM,CAAkB;gBAEpB,KAAK,EAAE,gCAAgC;IAiCnD;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,IAAI;IAwBpE;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAWrC;;OAEG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAWjD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,qBAAqB,CAAC;IA+C5C;;OAEG;IACH,QAAQ,IAAI,OAAO;CAGpB;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAGhC;AAED;;GAEG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAwC9C;AAMD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,qBAAqB,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAmDvB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+B9C;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAgBpE;AAMD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,YAAY,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAqC3B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAErE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAErE;AAMD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,gBAAgB,GAAG,YAAY,GAAG,qBAAqB,GAAG,iBAAiB,GACnF,OAAO,CAAC,uBAAuB,CAAC,CA6DlC;AAMD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAA6C;IAChE,OAAO,CAAC,aAAa,CAAiD;IACtE,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,gBAAgB,CAA4C;IAEpE;;OAEG;IACH,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAQpD;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAW1D;;OAEG;IACH,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAQ1C;;OAEG;IACG,eAAe,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAMpF;;OAEG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAK5C;;OAEG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAIlE;;OAEG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAIjE;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAInD;;OAEG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI/D;;OAEG;IACH,wBAAwB,IAAI,MAAM;IAclC;;OAEG;IACH,QAAQ,IAAI;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,gBAAgB,EAAE,MAAM,CAAC;KAC1B;CAQF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAErD;AAMD,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}