@vorionsys/atsf-core 0.2.0 → 0.2.2

package/dist/enforce/index.d.ts

@@ -1,12 +1,166 @@
 /**
- * ENFORCE - Policy Decision Point
+ * ENFORCE - Policy Decision Point with Fluid Governance (SDK Package)
  *
  * Makes enforcement decisions based on rule evaluations and trust levels.
+ * Supports three-tier fluid governance (GREEN/YELLOW/RED) with refinement
+ * options for agents to modify requests.
+ *
+ * For production use with persistence, use the full implementation from the
+ * vorion core package. This SDK package provides:
+ * - Type definitions aligned with @vorion/contracts
+ * - In-memory mock for testing
+ * - Interface definitions for custom implementations
  *
  * @packageDocumentation
  */
-import type { Intent, Decision, ControlAction, TrustLevel, TrustScore } from '../common/types.js';
+import type { Intent, ControlAction, TrustLevel, TrustScore, ID, Timestamp } from '../common/types.js';
 import type { EvaluationResult } from '../basis/types.js';
+/**
+ * Decision tier for three-tier fluid governance
+ *
+ * - GREEN: Approved with constraints - proceed immediately
+ * - YELLOW: Requires refinement or review - can be upgraded
+ * - RED: Denied - hard policy violation
+ */
+export type DecisionTier = 'GREEN' | 'YELLOW' | 'RED';
+/**
+ * Rate limit constraint
+ */
+export interface RateLimit {
+    resource: string;
+    limit: number;
+    windowSeconds: number;
+}
+/**
+ * Approval requirement
+ */
+export interface ApprovalRequirement {
+    type: 'none' | 'human_review' | 'automated_check' | 'multi_party';
+    approver: string;
+    timeoutMs?: number;
+    reason: string;
+}
+/**
+ * Constraints applied to permitted decisions
+ */
+export interface DecisionConstraints {
+    /** Tools/capabilities the agent can use */
+    allowedTools: string[];
+    /** Data scopes the agent can access */
+    dataScopes: string[];
+    /** Rate limits to enforce */
+    rateLimits: RateLimit[];
+    /** Required approvals before execution */
+    requiredApprovals: ApprovalRequirement[];
+    /** Must action be reversible? */
+    reversibilityRequired: boolean;
+    /** Maximum execution time in ms */
+    maxExecutionTimeMs?: number;
+    /** Maximum retry attempts */
+    maxRetries?: number;
+    /** Resource quotas */
+    resourceQuotas?: Record<string, number>;
+}
+/**
+ * Refinement action types for YELLOW decisions
+ */
+export type RefinementAction = 'REDUCE_SCOPE' | 'ADD_CONSTRAINTS' | 'REQUEST_APPROVAL' | 'PROVIDE_CONTEXT' | 'DECOMPOSE' | 'WAIT_FOR_TRUST';
+/**
+ * Refinement option for YELLOW decisions
+ */
+export interface RefinementOption {
+    id: ID;
+    action: RefinementAction;
+    description: string;
+    successProbability: number;
+    effort: 'low' | 'medium' | 'high';
+    parameters?: Record<string, unknown>;
+    resultingConstraints?: Partial<DecisionConstraints>;
+}
+/**
+ * Fluid decision with three-tier governance
+ */
+export interface FluidDecision {
+    /** Unique decision identifier */
+    id: ID;
+    /** Tenant identifier */
+    tenantId: ID;
+    /** Intent this decision is for */
+    intentId: ID;
+    /** Agent who made the request */
+    agentId: ID;
+    /** Correlation ID for tracing */
+    correlationId: ID;
+    /** Decision tier (GREEN/YELLOW/RED) */
+    tier: DecisionTier;
+    /** Whether the intent is permitted (GREEN=true, others=false) */
+    permitted: boolean;
+    /** Trust band at decision time (T0-T7) */
+    trustBand: string;
+    /** Trust score at decision time */
+    trustScore: number;
+    /** Human-readable reasoning */
+    reasoning: string[];
+    /** Constraints for GREEN decisions */
+    constraints?: DecisionConstraints;
+    /** Refinement options for YELLOW decisions */
+    refinementOptions?: RefinementOption[];
+    /** Deadline to submit refinement */
+    refinementDeadline?: Timestamp;
+    /** Maximum refinement attempts */
+    maxRefinementAttempts?: number;
+    /** Current refinement attempt */
+    refinementAttempt: number;
+    /** For RED: denial reason */
+    denialReason?: string;
+    /** For RED: is this a hard denial? */
+    hardDenial?: boolean;
+    /** For RED: violated policies */
+    violatedPolicies?: Array<{
+        policyId: string;
+        policyName: string;
+        severity: 'warning' | 'error' | 'critical';
+    }>;
+    /** When decision was made */
+    decidedAt: Timestamp;
+    /** When decision expires */
+    expiresAt: Timestamp;
+    /** Decision latency in ms */
+    latencyMs: number;
+}
+/**
+ * Workflow state for intent lifecycle
+ */
+export type WorkflowState = 'SUBMITTED' | 'EVALUATING' | 'APPROVED' | 'PENDING_REFINEMENT' | 'PENDING_REVIEW' | 'DENIED' | 'EXECUTING' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'EXPIRED';
+/**
+ * Workflow instance tracking intent lifecycle
+ */
+export interface WorkflowInstance {
+    id: ID;
+    tenantId: ID;
+    intentId: ID;
+    agentId: ID;
+    correlationId: ID;
+    state: WorkflowState;
+    currentDecisionId?: ID;
+    stateHistory: Array<{
+        from: WorkflowState;
+        to: WorkflowState;
+        reason: string;
+        timestamp: Timestamp;
+    }>;
+    execution?: {
+        executionId: string;
+        startedAt: Timestamp;
+        completedAt?: Timestamp;
+        status: 'running' | 'completed' | 'failed';
+        result?: unknown;
+        error?: string;
+    };
+    createdAt: Timestamp;
+    updatedAt: Timestamp;
+    expiresAt: Timestamp;
+}
 /**
  * Enforcement context combining intent and evaluation results
  */
@@ -15,14 +169,33 @@ export interface EnforcementContext {
     evaluation: EvaluationResult;
     trustScore: TrustScore;
     trustLevel: TrustLevel;
+    tenantId: ID;
+    correlationId?: ID;
 }
 /**
  * Enforcement policy configuration
  */
 export interface EnforcementPolicy {
+    /** Default action when no rules match */
     defaultAction: ControlAction;
+    /** Minimum trust level required */
     requireMinTrustLevel?: TrustLevel;
+    /** Trust level thresholds for automatic decisions */
+    trustThresholds?: {
+        autoApproveLevel: TrustLevel;
+        requireRefinementLevel: TrustLevel;
+        autoDenyLevel: TrustLevel;
+    };
+    /** Escalation rules */
     escalationRules?: EscalationRule[];
+    /** Default constraints for GREEN decisions */
+    defaultConstraints?: Partial<DecisionConstraints>;
+    /** Decision expiration time in milliseconds */
+    decisionExpirationMs?: number;
+    /** Refinement deadline in milliseconds */
+    refinementDeadlineMs?: number;
+    /** Maximum refinement attempts */
+    maxRefinementAttempts?: number;
 }
 /**
  * Escalation rule definition
@@ -31,28 +204,65 @@ export interface EscalationRule {
     condition: string;
     escalateTo: string;
     timeout: string;
+    reasonCategory?: 'trust_insufficient' | 'high_risk' | 'policy_violation' | 'manual_review';
+}
+/**
+ * Fluid decision result
+ */
+export interface FluidDecisionResult {
+    decision: FluidDecision;
+    workflow: WorkflowInstance;
+    tier: DecisionTier;
+    refinementOptions?: RefinementOption[];
+}
+/**
+ * Refinement request
+ */
+export interface RefinementRequest {
+    decisionId: ID;
+    selectedRefinements: ID[];
+    refinementContext?: Record<string, unknown>;
+}
+/**
+ * Interface for enforcement service implementations
+ */
+export interface IEnforcementService {
+    decide(context: EnforcementContext): Promise<FluidDecisionResult>;
+    refine(request: RefinementRequest, tenantId: ID): Promise<FluidDecisionResult | null>;
+    getDecision(id: ID, tenantId: ID): Promise<FluidDecision | null>;
+    getWorkflow(intentId: ID, tenantId: ID): Promise<WorkflowInstance | null>;
+    setPolicy(policy: EnforcementPolicy): void;
 }
 /**
- * Policy enforcement service
+ * In-memory enforcement service for testing
+ *
+ * WARNING: This is NOT suitable for production use.
+ * For production, connect to the Vorion API or use the full
+ * implementation from the vorion core package.
  */
-export declare class EnforcementService {
+export declare class MockEnforcementService implements IEnforcementService {
     private policy;
+    private decisions;
+    private workflows;
     constructor(policy?: EnforcementPolicy);
-    /**
-     * Make an enforcement decision
-     */
-    decide(context: EnforcementContext): Promise<Decision>;
-    /**
-     * Create a decision record
-     */
-    private createDecision;
-    /**
-     * Update enforcement policy
-     */
+    decide(context: EnforcementContext): Promise<FluidDecisionResult>;
+    refine(request: RefinementRequest, tenantId: ID): Promise<FluidDecisionResult | null>;
+    getDecision(id: ID, tenantId: ID): Promise<FluidDecision | null>;
+    getWorkflow(intentId: ID, tenantId: ID): Promise<WorkflowInstance | null>;
     setPolicy(policy: EnforcementPolicy): void;
+    private determineTier;
+    private buildReasoning;
+    private tierToState;
+    private getTrustBandName;
+    clear(): void;
+}
+/**
+ * @deprecated Use MockEnforcementService for testing or implement IEnforcementService
+ */
+export declare class EnforcementService extends MockEnforcementService {
 }
 /**
- * Create a new enforcement service instance
+ * @deprecated Use new MockEnforcementService() for testing
  */
 export declare function createEnforcementService(policy?: EnforcementPolicy): EnforcementService;
 //# sourceMappingURL=index.d.ts.map

package/dist/enforce/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enforce/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EACR,aAAa,EACb,UAAU,EACV,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAc,MAAM,mBAAmB,CAAC;AAItE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,oBAAoB,CAAC,EAAE,UAAU,CAAC;IAClC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,CAAC,EAAE,iBAAiB;IAItC;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+C5D;;OAEG;IACH,OAAO,CAAC,cAAc;IAyBtB;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;CAI3C;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,CAAC,EAAE,iBAAiB,GACzB,kBAAkB,CAEpB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/enforce/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EACV,MAAM,EACN,aAAa,EACb,UAAU,EACV,UAAU,EACV,EAAE,EACF,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAc,MAAM,mBAAmB,CAAC;AAQtE;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;AAMtD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,iBAAiB,GAAG,aAAa,CAAC;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,2CAA2C;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,uCAAuC;IACvC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6BAA6B;IAC7B,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,0CAA0C;IAC1C,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;IACzC,iCAAiC;IACjC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mCAAmC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAMD;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,WAAW,GACX,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,oBAAoB,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrD;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,EAAE,EAAE,EAAE,CAAC;IACP,wBAAwB;IACxB,QAAQ,EAAE,EAAE,CAAC;IACb,kCAAkC;IAClC,QAAQ,EAAE,EAAE,CAAC;IACb,iCAAiC;IACjC,OAAO,EAAE,EAAE,CAAC;IACZ,iCAAiC;IACjC,aAAa,EAAE,EAAE,CAAC;IAElB,uCAAuC;IACvC,IAAI,EAAE,YAAY,CAAC;IACnB,iEAAiE;IACjE,SAAS,EAAE,OAAO,CAAC;IAEnB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,SAAS,EAAE,MAAM,EAAE,CAAC;IAEpB,sCAAsC;IACtC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAElC,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,oCAAoC;IACpC,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC/B,kCAAkC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iCAAiC;IACjC,iBAAiB,EAAE,MAAM,CAAC;IAE1B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,KAAK,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;KAC5C,CAAC,CAAC;IAEH,6BAA6B;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,4BAA4B;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,gBAAgB,GAChB,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,GACR,WAAW,GACX,SAAS,CAAC;AAEd;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,EAAE,CAAC;IACb,QAAQ,EAAE,EAAE,CAAC;IACb,OAAO,EAAE,EAAE,CAAC;IACZ,aAAa,EAAE,EAAE,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;IACrB,iBAAiB,CAAC,EAAE,EAAE,CAAC;IACvB,YAAY,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,aAAa,CAAC;QACpB,EAAE,EAAE,aAAa,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,SAAS,CAAC;KACtB,CAAC,CAAC;IACH,SAAS,CAAC,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,SAAS,CAAC;QACrB,WAAW,CAAC,EAAE,SAAS,CAAC;QACxB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;QAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,gBAAgB,CAAC;IAC7B,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,EAAE,CAAC;IACb,aAAa,CAAC,EAAE,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,mCAAmC;IACnC,oBAAoB,CAAC,EAAE,UAAU,CAAC;IAClC,qDAAqD;IACrD,eAAe,CAAC,EAAE;QAChB,gBAAgB,EAAE,UAAU,CAAC;QAC7B,sBAAsB,EAAE,UAAU,CAAC;QACnC,aAAa,EAAE,UAAU,CAAC;KAC3B,CAAC;IACF,uBAAuB;IACvB,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClD,+CAA+C;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,0CAA0C;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kCAAkC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,oBAAoB,GAAG,WAAW,GAAG,kBAAkB,GAAG,eAAe,CAAC;CAC5F;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,aAAa,CAAC;IACxB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,EAAE,CAAC;IACf,mBAAmB,EAAE,EAAE,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACtF,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACjE,WAAW,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC1E,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC5C;AAkBD;;;;;;GAMG;AACH,qBAAa,sBAAuB,YAAW,mBAAmB;IAChE,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,SAAS,CAAwC;gBAE7C,MAAM,CAAC,EAAE,iBAAiB;IAIhC,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+FjE,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA4CrF,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKhE,WAAW,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK/E,SAAS,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAI1C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,gBAAgB;IAKxB,KAAK,IAAI,IAAI;CAId;AAMD;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,sBAAsB;CAAG;AAEjE;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,CAGvF"}

package/dist/enforce/index.js

@@ -1,77 +1,224 @@
 /**
- * ENFORCE - Policy Decision Point
+ * ENFORCE - Policy Decision Point with Fluid Governance (SDK Package)
  *
  * Makes enforcement decisions based on rule evaluations and trust levels.
+ * Supports three-tier fluid governance (GREEN/YELLOW/RED) with refinement
+ * options for agents to modify requests.
+ *
+ * For production use with persistence, use the full implementation from the
+ * vorion core package. This SDK package provides:
+ * - Type definitions aligned with @vorion/contracts
+ * - In-memory mock for testing
+ * - Interface definitions for custom implementations
  *
  * @packageDocumentation
  */
 import { createLogger } from '../common/logger.js';
 const logger = createLogger({ component: 'enforce' });
+// =============================================================================
+// MOCK IMPLEMENTATION
+// =============================================================================
+const DEFAULT_POLICY = {
+    defaultAction: 'deny',
+    trustThresholds: {
+        autoApproveLevel: 4,
+        requireRefinementLevel: 2,
+        autoDenyLevel: 0,
+    },
+    decisionExpirationMs: 3600000,
+    refinementDeadlineMs: 900000,
+    maxRefinementAttempts: 3,
+};
 /**
- * Policy enforcement service
+ * In-memory enforcement service for testing
+ *
+ * WARNING: This is NOT suitable for production use.
+ * For production, connect to the Vorion API or use the full
+ * implementation from the vorion core package.
  */
-export class EnforcementService {
+export class MockEnforcementService {
     policy;
+    decisions = new Map();
+    workflows = new Map();
     constructor(policy) {
-        this.policy = policy ?? { defaultAction: 'deny' };
+        this.policy = { ...DEFAULT_POLICY, ...policy };
     }
-    /**
-     * Make an enforcement decision
-     */
     async decide(context) {
-        const { intent, evaluation, trustScore, trustLevel } = context;
-        // Check minimum trust level
-        if (this.policy.requireMinTrustLevel !== undefined &&
-            trustLevel < this.policy.requireMinTrustLevel) {
-            logger.info({
-                intentId: intent.id,
-                required: this.policy.requireMinTrustLevel,
-                actual: trustLevel,
-            }, 'Trust level insufficient');
-            return this.createDecision(intent.id, 'deny', evaluation.rulesEvaluated, trustScore, trustLevel);
+        const { intent, evaluation, trustScore, trustLevel, tenantId } = context;
+        const correlationId = context.correlationId ?? crypto.randomUUID();
+        const now = new Date().toISOString();
+        // Determine tier
+        const tier = this.determineTier(evaluation, trustLevel);
+        // Create decision
+        const decision = {
+            id: crypto.randomUUID(),
+            tenantId,
+            intentId: intent.id,
+            agentId: intent.entityId,
+            correlationId,
+            tier,
+            permitted: tier === 'GREEN',
+            trustBand: `T${trustLevel}_${this.getTrustBandName(trustLevel)}`,
+            trustScore,
+            reasoning: this.buildReasoning(tier, evaluation, trustLevel),
+            refinementAttempt: 0,
+            decidedAt: now,
+            expiresAt: new Date(Date.now() + (this.policy.decisionExpirationMs ?? 3600000)).toISOString(),
+            latencyMs: 1,
+        };
+        // Add constraints for GREEN
+        if (tier === 'GREEN') {
+            decision.constraints = {
+                allowedTools: ['*'],
+                dataScopes: ['*'],
+                rateLimits: [],
+                requiredApprovals: [],
+                reversibilityRequired: false,
+                maxRetries: 3,
+            };
+        }
+        // Add refinement options for YELLOW
+        if (tier === 'YELLOW') {
+            decision.refinementDeadline = new Date(Date.now() + (this.policy.refinementDeadlineMs ?? 900000)).toISOString();
+            decision.maxRefinementAttempts = this.policy.maxRefinementAttempts ?? 3;
+            decision.refinementOptions = [
+                {
+                    id: crypto.randomUUID(),
+                    action: 'ADD_CONSTRAINTS',
+                    description: 'Accept additional constraints',
+                    successProbability: 0.9,
+                    effort: 'low',
+                },
+                {
+                    id: crypto.randomUUID(),
+                    action: 'REQUEST_APPROVAL',
+                    description: 'Request human approval',
+                    successProbability: 0.7,
+                    effort: 'medium',
+                },
+            ];
         }
-        // Use evaluation result action
-        const action = evaluation.passed ? 'allow' : evaluation.finalAction;
-        logger.info({
+        // Add denial details for RED
+        if (tier === 'RED') {
+            decision.denialReason = 'policy_violation';
+            decision.hardDenial = true;
+        }
+        this.decisions.set(decision.id, decision);
+        // Create workflow
+        const workflow = {
+            id: crypto.randomUUID(),
+            tenantId,
             intentId: intent.id,
-            action,
-            rulesEvaluated: evaluation.rulesEvaluated.length,
-        }, 'Enforcement decision made');
-        return this.createDecision(intent.id, action, evaluation.rulesEvaluated, trustScore, trustLevel);
+            agentId: intent.entityId,
+            correlationId,
+            state: this.tierToState(tier),
+            currentDecisionId: decision.id,
+            stateHistory: [
+                { from: 'SUBMITTED', to: this.tierToState(tier), reason: `Decision: ${tier}`, timestamp: now },
+            ],
+            createdAt: now,
+            updatedAt: now,
+            expiresAt: decision.expiresAt,
+        };
+        this.workflows.set(intent.id, workflow);
+        logger.info({ decisionId: decision.id, intentId: intent.id, tier }, 'Enforcement decision made (mock)');
+        return { decision, workflow, tier, refinementOptions: decision.refinementOptions };
     }
-    /**
-     * Create a decision record
-     */
-    createDecision(intentId, action, constraintsEvaluated, trustScore, trustLevel) {
-        return {
-            intentId,
-            action,
-            constraintsEvaluated: constraintsEvaluated.map((r) => ({
-                constraintId: r.ruleId,
-                passed: r.matched,
-                action: r.action,
-                reason: r.reason,
-                details: r.details,
-                durationMs: r.durationMs,
-                evaluatedAt: new Date().toISOString(),
-            })),
-            trustScore,
-            trustLevel,
-            decidedAt: new Date().toISOString(),
+    async refine(request, tenantId) {
+        const original = this.decisions.get(request.decisionId);
+        if (!original || original.tier !== 'YELLOW')
+            return null;
+        const now = new Date().toISOString();
+        // Create refined decision (simple: just upgrade to GREEN)
+        const refined = {
+            ...original,
+            id: crypto.randomUUID(),
+            tier: 'GREEN',
+            permitted: true,
+            refinementAttempt: original.refinementAttempt + 1,
+            reasoning: ['Refined to GREEN after applying constraints'],
+            constraints: {
+                allowedTools: ['*'],
+                dataScopes: ['*'],
+                rateLimits: [],
+                requiredApprovals: [],
+                reversibilityRequired: true,
+                maxRetries: 3,
+            },
+            decidedAt: now,
         };
+        this.decisions.set(refined.id, refined);
+        // Update workflow
+        const workflow = this.workflows.get(original.intentId);
+        if (workflow) {
+            workflow.state = 'APPROVED';
+            workflow.currentDecisionId = refined.id;
+            workflow.updatedAt = now;
+            workflow.stateHistory.push({
+                from: 'PENDING_REFINEMENT',
+                to: 'APPROVED',
+                reason: 'Refined to GREEN',
+                timestamp: now,
+            });
+        }
+        return { decision: refined, workflow: workflow, tier: 'GREEN' };
+    }
+    async getDecision(id, tenantId) {
+        const decision = this.decisions.get(id);
+        return decision?.tenantId === tenantId ? decision : null;
+    }
+    async getWorkflow(intentId, tenantId) {
+        const workflow = this.workflows.get(intentId);
+        return workflow?.tenantId === tenantId ? workflow : null;
     }
-    /**
-     * Update enforcement policy
-     */
     setPolicy(policy) {
-        this.policy = policy;
-        logger.info({ policy }, 'Enforcement policy updated');
+        this.policy = { ...DEFAULT_POLICY, ...policy };
+    }
+    determineTier(evaluation, trustLevel) {
+        const thresholds = this.policy.trustThresholds;
+        if (evaluation.violatedRules.some((r) => r.action === 'deny' || r.action === 'terminate')) {
+            return 'RED';
+        }
+        if (trustLevel < thresholds.autoDenyLevel)
+            return 'RED';
+        if (trustLevel < thresholds.requireRefinementLevel)
+            return 'YELLOW';
+        if (trustLevel >= thresholds.autoApproveLevel && evaluation.passed)
+            return 'GREEN';
+        return 'YELLOW';
+    }
+    buildReasoning(tier, evaluation, trustLevel) {
+        if (tier === 'GREEN')
+            return ['All checks passed', `Trust T${trustLevel} meets requirements`];
+        if (tier === 'YELLOW')
+            return ['Refinement options available'];
+        return ['Policy violation', 'Request cannot proceed'];
+    }
+    tierToState(tier) {
+        return tier === 'GREEN' ? 'APPROVED' : tier === 'YELLOW' ? 'PENDING_REFINEMENT' : 'DENIED';
     }
+    getTrustBandName(level) {
+        const names = ['SANDBOX', 'OBSERVED', 'PROVISIONAL', 'MONITORED', 'STANDARD', 'TRUSTED', 'CERTIFIED', 'AUTONOMOUS'];
+        return names[level] ?? 'SANDBOX';
+    }
+    clear() {
+        this.decisions.clear();
+        this.workflows.clear();
+    }
+}
+// =============================================================================
+// BACKWARDS COMPATIBLE EXPORTS
+// =============================================================================
+/**
+ * @deprecated Use MockEnforcementService for testing or implement IEnforcementService
+ */
+export class EnforcementService extends MockEnforcementService {
 }
 /**
- * Create a new enforcement service instance
+ * @deprecated Use new MockEnforcementService() for testing
  */
 export function createEnforcementService(policy) {
+    logger.warn('createEnforcementService() creates an in-memory mock. For production, connect to the Vorion API.');
     return new EnforcementService(policy);
 }
 //# sourceMappingURL=index.js.map

package/dist/enforce/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/enforce/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAWnD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AA8BtD;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAoB;IAElC,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAA2B;QACtC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAE/D,4BAA4B;QAC5B,IACE,IAAI,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS;YAC9C,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAC7C,CAAC;YACD,MAAM,CAAC,IAAI,CACT;gBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAC1C,MAAM,EAAE,UAAU;aACnB,EACD,0BAA0B,CAC3B,CAAC;YAEF,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,CAAC,EAAE,EACT,MAAM,EACN,UAAU,CAAC,cAAc,EACzB,UAAU,EACV,UAAU,CACX,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAEpE,MAAM,CAAC,IAAI,CACT;YACE,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM;YACN,cAAc,EAAE,UAAU,CAAC,cAAc,CAAC,MAAM;SACjD,EACD,2BAA2B,CAC5B,CAAC;QAEF,OAAO,IAAI,CAAC,cAAc,CACxB,MAAM,CAAC,EAAE,EACT,MAAM,EACN,UAAU,CAAC,cAAc,EACzB,UAAU,EACV,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,QAAY,EACZ,MAAqB,EACrB,oBAAkC,EAClC,UAAsB,EACtB,UAAsB;QAEtB,OAAO;YACL,QAAQ;YACR,MAAM;YACN,oBAAoB,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC;gBACjE,YAAY,EAAE,CAAC,CAAC,MAAM;gBACtB,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YACH,UAAU;YACV,UAAU;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAA0B;IAE1B,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/enforce/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAWnD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AA+RtD,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,MAAM,cAAc,GAAsB;IACxC,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE;QACf,gBAAgB,EAAE,CAAC;QACnB,sBAAsB,EAAE,CAAC;QACzB,aAAa,EAAE,CAAC;KACjB;IACD,oBAAoB,EAAE,OAAO;IAC7B,oBAAoB,EAAE,MAAM;IAC5B,qBAAqB,EAAE,CAAC;CACzB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAoB;IAC1B,SAAS,GAA2B,IAAI,GAAG,EAAE,CAAC;IAC9C,SAAS,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEzD,YAAY,MAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA2B;QACtC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QACzE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,iBAAiB;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAExD,kBAAkB;QAClB,MAAM,QAAQ,GAAkB;YAC9B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ;YACR,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,aAAa;YACb,IAAI;YACJ,SAAS,EAAE,IAAI,KAAK,OAAO;YAC3B,SAAS,EAAE,IAAI,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE;YAChE,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC;YAC5D,iBAAiB,EAAE,CAAC;YACpB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;YAC7F,SAAS,EAAE,CAAC;SACb,CAAC;QAEF,4BAA4B;QAC5B,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,QAAQ,CAAC,WAAW,GAAG;gBACrB,YAAY,EAAE,CAAC,GAAG,CAAC;gBACnB,UAAU,EAAE,CAAC,GAAG,CAAC;gBACjB,UAAU,EAAE,EAAE;gBACd,iBAAiB,EAAE,EAAE;gBACrB,qBAAqB,EAAE,KAAK;gBAC5B,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,QAAQ,CAAC,kBAAkB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAChH,QAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,CAAC;YACxE,QAAQ,CAAC,iBAAiB,GAAG;gBAC3B;oBACE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;oBACvB,MAAM,EAAE,iBAAiB;oBACzB,WAAW,EAAE,+BAA+B;oBAC5C,kBAAkB,EAAE,GAAG;oBACvB,MAAM,EAAE,KAAK;iBACd;gBACD;oBACE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;oBACvB,MAAM,EAAE,kBAAkB;oBAC1B,WAAW,EAAE,wBAAwB;oBACrC,kBAAkB,EAAE,GAAG;oBACvB,MAAM,EAAE,QAAQ;iBACjB;aACF,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,QAAQ,CAAC,YAAY,GAAG,kBAAkB,CAAC;YAC3C,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAE1C,kBAAkB;QAClB,MAAM,QAAQ,GAAqB;YACjC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ;YACR,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,aAAa;YACb,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAC7B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;YAC9B,YAAY,EAAE;gBACZ,EAAE,IAAI,EAAE,WAA4B,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;aAChH;YACD,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,EACtD,kCAAkC,CACnC,CAAC;QAEF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,QAAY;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,0DAA0D;QAC1D,MAAM,OAAO,GAAkB;YAC7B,GAAG,QAAQ;YACX,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,GAAG,CAAC;YACjD,SAAS,EAAE,CAAC,6CAA6C,CAAC;YAC1D,WAAW,EAAE;gBACX,YAAY,EAAE,CAAC,GAAG,CAAC;gBACnB,UAAU,EAAE,CAAC,GAAG,CAAC;gBACjB,UAAU,EAAE,EAAE;gBACd,iBAAiB,EAAE,EAAE;gBACrB,qBAAqB,EAAE,IAAI;gBAC3B,UAAU,EAAE,CAAC;aACd;YACD,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAExC,kBAAkB;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,GAAG,UAAU,CAAC;YAC5B,QAAQ,CAAC,iBAAiB,GAAG,OAAO,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;YACzB,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;gBACzB,IAAI,EAAE,oBAAoB;gBAC1B,EAAE,EAAE,UAAU;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAM,EAAE,QAAY;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,OAAO,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAY,EAAE,QAAY;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAED,SAAS,CAAC,MAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAEO,aAAa,CAAC,UAA4B,EAAE,UAAsB;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,eAAgB,CAAC;QAEhD,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,UAAU,GAAG,UAAU,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,UAAU,GAAG,UAAU,CAAC,sBAAsB;YAAE,OAAO,QAAQ,CAAC;QACpE,IAAI,UAAU,IAAI,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QACnF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,IAAkB,EAAE,UAA4B,EAAE,UAAsB;QAC7F,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,CAAC,mBAAmB,EAAE,UAAU,UAAU,qBAAqB,CAAC,CAAC;QAC9F,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC/D,OAAO,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;IACxD,CAAC;IAEO,WAAW,CAAC,IAAkB;QACpC,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7F,CAAC;IAEO,gBAAgB,CAAC,KAAiB;QACxC,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QACpH,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IACnC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,sBAAsB;CAAG;AAEjE;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,MAAM,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IAChH,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}

package/dist/governance/index.d.ts

@@ -10,6 +10,8 @@ import type { ID, ControlAction } from '../common/types.js';
 import type { GovernanceRule, RuleCategory, RuleCondition, RuleEffect, ConditionOperator, Authority, GovernanceRequest, GovernanceResult, GovernanceConfig, RuleQuery } from './types.js';
 export * from './types.js';
 export * from './fluid-workflow.js';
+export { GovernanceProofBridge } from './proof-bridge.js';
+export type { ProofCreateFn, ProofBridgeProofRequest, ProofBridgeConfig, GovernanceProofResult, } from './proof-bridge.js';
 /**
  * Governance Engine - manages and evaluates governance rules
  */

package/dist/governance/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAc,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAIhB,gBAAgB,EAChB,SAAS,EAEV,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AA8BpC;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,gBAAgB,CAAgC;IACxD,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,eAAe,CAA2E;gBAEtF,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM;IAIlD;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAsBxC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI;IAehC;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAY7C;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4JrE;;OAEG;IACH,OAAO,CAAC,YAAY;IAOpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+BtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAyBjB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA0C1B;;OAEG;IACH,OAAO,CAAC,YAAY;IAiCpB;;OAEG;YACW,iBAAiB;IAY/B;;OAEG;YACW,0BAA0B;IAuBxC;;OAEG;IACH,OAAO,CAAC,aAAa;IAerB;;OAEG;IACH,OAAO,CAAC,aAAa;IA2CrB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAc3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA8B1B;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA8B7D;;OAEG;IACH,QAAQ,IAAI;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;KACnB;IA2BD;;OAEG;IACH,UAAU,IAAI,IAAI;CAInB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAE3F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE,OAAO,CAAC,cAAc,CAAM,GACpC,cAAc,CAwBhB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,OAAO,GACb,aAAa,CAOf;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,eAAe,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,EACrC,QAAQ,EAAE,aAAa,EAAE,GACxB,aAAa,CASf;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,OAAO,CAAC,UAAU,CAAM,GAChC,UAAU,CASZ"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,EAAE,EAAc,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,EACV,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAIhB,gBAAgB,EAChB,SAAS,EAEV,MAAM,YAAY,CAAC;AAEpB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,YAAY,EACV,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AA8B3B;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,gBAAgB,CAAgC;IACxD,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,eAAe,CAA2E;gBAEtF,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM;IAIlD;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAsBxC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI;IAehC;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI;IAY7C;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4JrE;;OAEG;IACH,OAAO,CAAC,YAAY;IAOpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAInB;;OAEG;IACH,OAAO,CAAC,cAAc;IA+BtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAK1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAyBjB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA0C1B;;OAEG;IACH,OAAO,CAAC,YAAY;IAiCpB;;OAEG;YACW,iBAAiB;IAY/B;;OAEG;YACW,0BAA0B;IAuBxC;;OAEG;IACH,OAAO,CAAC,aAAa;IAerB;;OAEG;IACH,OAAO,CAAC,aAAa;IA2CrB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IA4B3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAc3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA8B1B;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA8B7D;;OAEG;IACH,QAAQ,IAAI;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;KACnB;IA2BD;;OAEG;IACH,UAAU,IAAI,IAAI;CAInB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAE3F;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,aAAa,EACxB,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE,OAAO,CAAC,cAAc,CAAM,GACpC,cAAc,CAwBhB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,OAAO,GACb,aAAa,CAOf;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,eAAe,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,EACrC,QAAQ,EAAE,aAAa,EAAE,GACxB,aAAa,CASf;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,OAAO,CAAC,UAAU,CAAM,GAChC,UAAU,CASZ"}

package/dist/governance/index.js

@@ -9,6 +9,7 @@
 import { createLogger } from '../common/logger.js';
 export * from './types.js';
 export * from './fluid-workflow.js';
+export { GovernanceProofBridge } from './proof-bridge.js';
 const logger = createLogger({ component: 'governance' });
 /**
  * Default governance configuration