@vorionsys/platform-core 0.1.0

package/dist/car-extensions/builtin-extensions/audit.js

@@ -0,0 +1,445 @@
+/**
+ * Audit Trail Extension
+ *
+ * Provides comprehensive audit logging for all agent activities.
+ * Integrates with Vorion's proof module for cryptographic sealing
+ * of audit records.
+ *
+ * @packageDocumentation
+ * @module @vorion/car-extensions/builtin-extensions/audit
+ * @license Apache-2.0
+ */
+import { createLogger } from '../../common/logger.js';
+import { secureRandomString } from '../../common/random.js';
+const logger = createLogger({ component: 'car-ext-audit' });
+const DEFAULT_CONFIG = {
+    externalLogging: false,
+    includeDetails: true,
+    retentionDays: 365,
+    chainEvents: true,
+};
+/**
+ * In-memory audit log (in production, use database/external service)
+ */
+const auditLog = new Map();
+/**
+ * Track last event ID per agent for chaining
+ */
+const lastEventIds = new Map();
+/**
+ * Generate unique ID
+ */
+function generateId() {
+    return `audit-${Date.now()}-${secureRandomString(7)}`;
+}
+/**
+ * Calculate simple hash of event (in production, use proper crypto)
+ */
+function calculateHash(event) {
+    const content = JSON.stringify({
+        id: event.id,
+        type: event.type,
+        timestamp: event.timestamp.toISOString(),
+        agentDid: event.agentDid,
+        details: event.details,
+        previousEventId: event.previousEventId,
+    });
+    // Simple hash for demo - use crypto.subtle in production
+    let hash = 0;
+    for (let i = 0; i < content.length; i++) {
+        const char = content.charCodeAt(i);
+        hash = (hash << 5) - hash + char;
+        hash = hash & hash;
+    }
+    return Math.abs(hash).toString(16).padStart(16, '0');
+}
+/**
+ * Write audit event
+ */
+function writeAuditEvent(type, agent, details, correlationId, config = DEFAULT_CONFIG) {
+    const id = generateId();
+    const previousEventId = config.chainEvents
+        ? lastEventIds.get(agent.did)
+        : undefined;
+    const event = {
+        id,
+        type,
+        timestamp: new Date(),
+        agentDid: agent.did,
+        agentCarId: agent.carId,
+        details: config.includeDetails ? details : { summary: type },
+        correlationId,
+        previousEventId,
+    };
+    // Calculate hash
+    event.hash = calculateHash(event);
+    // Store event
+    let agentEvents = auditLog.get(agent.did);
+    if (!agentEvents) {
+        agentEvents = [];
+        auditLog.set(agent.did, agentEvents);
+    }
+    agentEvents.push(event);
+    // Update last event ID for chaining
+    lastEventIds.set(agent.did, id);
+    // Log
+    logger.info({
+        auditEventId: id,
+        eventType: type,
+        agentDid: agent.did,
+        correlationId,
+    }, 'Audit event recorded');
+    return event;
+}
+/**
+ * Query audit events for an agent
+ */
+export function queryAuditEvents(agentDid, options) {
+    const events = auditLog.get(agentDid) ?? [];
+    let filtered = events;
+    if (options?.type) {
+        filtered = filtered.filter((e) => e.type === options.type);
+    }
+    if (options?.startTime) {
+        filtered = filtered.filter((e) => e.timestamp >= options.startTime);
+    }
+    if (options?.endTime) {
+        filtered = filtered.filter((e) => e.timestamp <= options.endTime);
+    }
+    // Sort by timestamp descending
+    filtered = filtered.sort((a, b) => b.timestamp.getTime() - a.timestamp.getTime());
+    if (options?.limit) {
+        filtered = filtered.slice(0, options.limit);
+    }
+    return filtered;
+}
+/**
+ * Verify audit chain integrity
+ */
+export function verifyAuditChain(agentDid) {
+    const events = auditLog.get(agentDid) ?? [];
+    // Sort by timestamp
+    const sorted = events.sort((a, b) => a.timestamp.getTime() - b.timestamp.getTime());
+    for (let i = 1; i < sorted.length; i++) {
+        const current = sorted[i];
+        const previous = sorted[i - 1];
+        // Check chain linkage
+        if (current.previousEventId !== previous.id) {
+            return {
+                valid: false,
+                brokenAt: current.id,
+                details: `Event ${current.id} does not link to previous event ${previous.id}`,
+            };
+        }
+        // Verify hash
+        const expectedHash = calculateHash({
+            id: current.id,
+            type: current.type,
+            timestamp: current.timestamp,
+            agentDid: current.agentDid,
+            agentCarId: current.agentCarId,
+            details: current.details,
+            correlationId: current.correlationId,
+            previousEventId: current.previousEventId,
+        });
+        if (current.hash !== expectedHash) {
+            return {
+                valid: false,
+                brokenAt: current.id,
+                details: `Hash mismatch for event ${current.id}`,
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Audit Trail Extension
+ *
+ * Provides comprehensive audit logging including:
+ * - Capability request/grant auditing
+ * - Action initiation/completion auditing
+ * - Trust adjustment auditing
+ * - Anomaly response auditing
+ * - Cryptographic chaining of events
+ */
+export const auditExtension = {
+    extensionId: 'car-ext-audit-v1',
+    name: 'Audit Trail',
+    version: '1.0.0',
+    shortcode: 'audit',
+    publisher: 'did:web:agentanchor.io',
+    description: 'Comprehensive audit logging with cryptographic chaining. ' +
+        'Records all agent activities for compliance and forensics.',
+    requiredCARVersion: '>=1.0.0',
+    hooks: {
+        onLoad: async () => {
+            logger.info('Audit Trail extension loaded');
+        },
+        onUnload: async () => {
+            logger.info('Audit Trail extension unloading');
+            // In production: flush pending events to persistent storage
+            auditLog.clear();
+            lastEventIds.clear();
+        },
+    },
+    capability: {
+        /**
+         * Audit capability requests
+         */
+        preCheck: async (agent, request) => {
+            writeAuditEvent('capability.requested', agent, {
+                domains: request.domains,
+                level: request.level,
+                purpose: request.context.purpose,
+                source: request.context.source,
+                ttl: request.ttl,
+            });
+            // Audit extension doesn't block - always allow
+            return { allow: true };
+        },
+        /**
+         * Audit capability grants
+         */
+        postGrant: async (agent, grant) => {
+            writeAuditEvent('capability.granted', agent, {
+                grantId: grant.id,
+                domains: grant.domains,
+                level: grant.level,
+                expiresAt: grant.expiresAt.toISOString(),
+                constraintCount: grant.constraints?.length ?? 0,
+            }, grant.id);
+            return grant;
+        },
+        /**
+         * Audit capability expiry
+         */
+        onExpiry: async (agent, grant) => {
+            writeAuditEvent('capability.expired', agent, {
+                grantId: grant.id,
+                domains: grant.domains,
+                level: grant.level,
+                issuedAt: grant.issuedAt.toISOString(),
+                expiresAt: grant.expiresAt.toISOString(),
+            }, grant.id);
+            // Default: let capability expire naturally
+            return { action: 'expire' };
+        },
+    },
+    action: {
+        /**
+         * Audit action initiation
+         */
+        preAction: async (agent, action) => {
+            const correlationId = `action-${Date.now()}`;
+            writeAuditEvent('action.initiated', agent, {
+                actionType: action.type,
+                targetType: action.target.type,
+                targetId: action.target.id,
+                purpose: action.context.purpose,
+                source: action.context.source,
+            }, correlationId);
+            // Audit extension doesn't block - always allow
+            return { proceed: true };
+        },
+        /**
+         * Audit action completion
+         */
+        postAction: async (agent, action) => {
+            writeAuditEvent(action.result?.success ? 'action.completed' : 'action.failed', agent, {
+                actionId: action.id,
+                actionType: action.type,
+                targetType: action.target.type,
+                targetId: action.target.id,
+                success: action.result?.success,
+                startedAt: action.startedAt.toISOString(),
+                completedAt: action.completedAt?.toISOString(),
+                duration: action.completedAt
+                    ? new Date(action.completedAt).getTime() -
+                        new Date(action.startedAt).getTime()
+                    : undefined,
+                sideEffectCount: action.result?.sideEffects?.length ?? 0,
+                errorMessage: action.error?.message,
+            }, action.id);
+        },
+        /**
+         * Audit action failures
+         */
+        onFailure: async (agent, action, error) => {
+            writeAuditEvent('action.failed', agent, {
+                actionId: action.id,
+                actionType: action.type,
+                targetType: action.target.type,
+                targetId: action.target.id,
+                errorName: error.name,
+                errorMessage: error.message,
+                startedAt: action.startedAt.toISOString(),
+            }, action.id);
+            // Don't affect retry behavior
+            return { retry: true };
+        },
+    },
+    monitoring: {
+        /**
+         * Audit anomaly responses
+         */
+        onAnomaly: async (agent, anomaly) => {
+            writeAuditEvent('anomaly.detected', agent, {
+                anomalyId: anomaly.id,
+                anomalyType: anomaly.type,
+                severity: anomaly.severity,
+                description: anomaly.description,
+                detectedAt: anomaly.detectedAt.toISOString(),
+            }, anomaly.id);
+            // Audit doesn't affect anomaly handling - just logs
+            return { action: 'log' };
+        },
+    },
+    trust: {
+        /**
+         * Audit revocation events
+         */
+        onRevocation: async (revocation) => {
+            // Create a minimal agent identity for auditing
+            const pseudoAgent = {
+                did: revocation.agentDid,
+                carId: revocation.carId,
+                publisher: 'unknown',
+                name: 'revoked-agent',
+                domains: 0,
+                level: 0,
+                version: '0.0.0',
+            };
+            writeAuditEvent('trust.revoked', pseudoAgent, {
+                revocationId: revocation.id,
+                scope: revocation.scope,
+                reason: revocation.reason,
+                revokedAt: revocation.revokedAt.toISOString(),
+                attestationIds: revocation.attestationIds,
+            }, revocation.id);
+        },
+        /**
+         * Audit trust adjustments
+         */
+        adjustTrust: async (agent, adjustment) => {
+            // Calculate what the adjustment would be (simplified)
+            const currentScore = agent.trustScore ?? 0;
+            let newScore = currentScore;
+            switch (adjustment.type) {
+                case 'increment':
+                    newScore = Math.min(1000, currentScore + (adjustment.amount ?? 0));
+                    break;
+                case 'decrement':
+                    newScore = Math.max(0, currentScore - (adjustment.amount ?? 0));
+                    break;
+                case 'set':
+                    newScore = adjustment.value ?? currentScore;
+                    break;
+            }
+            const scoreToTier = (score) => {
+                if (score >= 951)
+                    return 7; // T7 Autonomous
+                if (score >= 876)
+                    return 6; // T6 Certified
+                if (score >= 800)
+                    return 5; // T5 Trusted
+                if (score >= 650)
+                    return 4; // T4 Standard
+                if (score >= 500)
+                    return 3; // T3 Monitored
+                if (score >= 350)
+                    return 2; // T2 Provisional
+                if (score >= 200)
+                    return 1; // T1 Observed
+                return 0; // T0 Sandbox
+            };
+            const previousTier = scoreToTier(currentScore);
+            const newTier = scoreToTier(newScore);
+            writeAuditEvent('trust.adjusted', agent, {
+                adjustmentType: adjustment.type,
+                adjustmentAmount: adjustment.amount,
+                adjustmentValue: adjustment.value,
+                reason: adjustment.reason,
+                evidence: adjustment.evidence,
+                previousScore: currentScore,
+                newScore,
+                previousTier,
+                newTier,
+                tierChanged: previousTier !== newTier,
+            });
+            return {
+                previousScore: currentScore,
+                newScore,
+                previousTier,
+                newTier,
+                tierChanged: previousTier !== newTier,
+            };
+        },
+        /**
+         * Audit attestation verification
+         */
+        verifyAttestation: async (attestation) => {
+            // Perform basic verification
+            const now = new Date();
+            const notExpired = attestation.expiresAt > now;
+            const notRevoked = !attestation.revoked;
+            // In production, verify signature cryptographically
+            const signatureVerified = true; // Placeholder
+            // In production, verify issuer against trusted list
+            const issuerVerified = attestation.issuerDid.startsWith('did:');
+            const valid = notExpired && notRevoked && signatureVerified && issuerVerified;
+            // Create pseudo-agent for audit logging
+            const pseudoAgent = {
+                did: attestation.agentDid,
+                carId: `car:${attestation.agentDid}`,
+                publisher: attestation.issuerDid,
+                name: 'attestation-subject',
+                domains: 0,
+                level: 0,
+                version: '0.0.0',
+            };
+            writeAuditEvent(valid ? 'attestation.verified' : 'attestation.failed', pseudoAgent, {
+                attestationId: attestation.id,
+                issuerDid: attestation.issuerDid,
+                type: attestation.type,
+                issuedAt: attestation.issuedAt.toISOString(),
+                expiresAt: attestation.expiresAt.toISOString(),
+                valid,
+                notExpired,
+                notRevoked,
+                issuerVerified,
+                signatureVerified,
+            }, attestation.id);
+            const errors = [];
+            const warnings = [];
+            if (!notExpired)
+                errors.push('Attestation has expired');
+            if (!notRevoked)
+                errors.push('Attestation has been revoked');
+            if (!issuerVerified)
+                errors.push('Issuer could not be verified');
+            if (!signatureVerified)
+                errors.push('Signature verification failed');
+            if (attestation.expiresAt < new Date(Date.now() + 7 * 24 * 60 * 60 * 1000)) {
+                warnings.push('Attestation expires within 7 days');
+            }
+            return {
+                valid,
+                errors,
+                warnings,
+                issuerVerified,
+                signatureVerified,
+                notExpired,
+                notRevoked,
+            };
+        },
+    },
+};
+/**
+ * Create audit extension with custom configuration
+ */
+export function createAuditExtension(config) {
+    // Could be extended to use custom config
+    return auditExtension;
+}
+export default auditExtension;
+//# sourceMappingURL=audit.js.map

package/dist/car-extensions/builtin-extensions/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/car-extensions/builtin-extensions/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAoB5D,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;AA4D5D,MAAM,cAAc,GAAgB;IAClC,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,GAAG;IAClB,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,QAAQ,GAA8B,IAAI,GAAG,EAAE,CAAC;AAEtD;;GAEG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;AAEpD;;GAEG;AACH,SAAS,UAAU;IACjB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAA6C;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC,CAAC;IAEH,yDAAyD;IACzD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QACjC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,IAAoB,EACpB,KAAoB,EACpB,OAAgC,EAChC,aAAsB,EACtB,SAAsB,cAAc;IAEpC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW;QACxC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAe;QACxB,EAAE;QACF,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,UAAU,EAAE,KAAK,CAAC,KAAK;QACvB,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;QAC5D,aAAa;QACb,eAAe;KAChB,CAAC;IAEF,iBAAiB;IACjB,KAAK,CAAC,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAElC,cAAc;IACd,IAAI,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,EAAE,CAAC;QACjB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC;IACD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExB,oCAAoC;IACpC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAEhC,MAAM;IACN,MAAM,CAAC,IAAI,CACT;QACE,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,aAAa;KACd,EACD,sBAAsB,CACvB,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,OAKC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAE5C,IAAI,QAAQ,GAAG,MAAM,CAAC;IAEtB,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,SAAU,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,OAAQ,CAAC,CAAC;IACrE,CAAC;IAED,+BAA+B;IAC/B,QAAQ,GAAG,QAAQ,CAAC,IAAI,CACtB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CACxD,CAAC;IAEF,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAK/C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAE5C,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CACxD,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAEhC,sBAAsB;QACtB,IAAI,OAAO,CAAC,eAAe,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,OAAO,EAAE,SAAS,OAAO,CAAC,EAAE,oCAAoC,QAAQ,CAAC,EAAE,EAAE;aAC9E,CAAC;QACJ,CAAC;QAED,cAAc;QACd,MAAM,YAAY,GAAG,aAAa,CAAC;YACjC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,OAAO,EAAE,2BAA2B,OAAO,CAAC,EAAE,EAAE;aACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,WAAW,EAAE,kBAAkB;IAC/B,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,OAAO;IAChB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,wBAAwB;IACnC,WAAW,EACT,2DAA2D;QAC3D,4DAA4D;IAC9D,kBAAkB,EAAE,SAAS;IAE7B,KAAK,EAAE;QACL,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QAED,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAC/C,4DAA4D;YAC5D,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF;IAED,UAAU,EAAE;QACV;;WAEG;QACH,QAAQ,EAAE,KAAK,EACb,KAAoB,EACpB,OAA0B,EACD,EAAE;YAC3B,eAAe,CAAC,sBAAsB,EAAE,KAAK,EAAE;gBAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;gBAChC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;gBAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAC;YAEH,+CAA+C;YAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAED;;WAEG;QACH,SAAS,EAAE,KAAK,EACd,KAAoB,EACpB,KAAsB,EACI,EAAE;YAC5B,eAAe,CACb,oBAAoB,EACpB,KAAK,EACL;gBACE,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;gBACxC,eAAe,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;aAChD,EACD,KAAK,CAAC,EAAE,CACT,CAAC;YAEF,OAAO,KAAK,CAAC;QACf,CAAC;QAED;;WAEG;QACH,QAAQ,EAAE,KAAK,EACb,KAAoB,EACpB,KAAsB,EACG,EAAE;YAC3B,eAAe,CACb,oBAAoB,EACpB,KAAK,EACL;gBACE,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;aACzC,EACD,KAAK,CAAC,EAAE,CACT,CAAC;YAEF,2CAA2C;YAC3C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,CAAC;KACF;IAED,MAAM,EAAE;QACN;;WAEG;QACH,SAAS,EAAE,KAAK,EACd,KAAoB,EACpB,MAAqB,EACK,EAAE;YAC5B,MAAM,aAAa,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAE7C,eAAe,CACb,kBAAkB,EAClB,KAAK,EACL;gBACE,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;gBAC/B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;aAC9B,EACD,aAAa,CACd,CAAC;YAEF,+CAA+C;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED;;WAEG;QACH,UAAU,EAAE,KAAK,EACf,KAAoB,EACpB,MAAoB,EACL,EAAE;YACjB,eAAe,CACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,EAC7D,KAAK,EACL;gBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;gBACzC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE;gBAC9C,QAAQ,EAAE,MAAM,CAAC,WAAW;oBAC1B,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;wBACtC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;oBACtC,CAAC,CAAC,SAAS;gBACb,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;gBACxD,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;aACpC,EACD,MAAM,CAAC,EAAE,CACV,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,SAAS,EAAE,KAAK,EACd,KAAoB,EACpB,MAAoB,EACpB,KAAY,EACZ,EAAE;YACF,eAAe,CACb,eAAe,EACf,KAAK,EACL;gBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC1B,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,YAAY,EAAE,KAAK,CAAC,OAAO;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;aAC1C,EACD,MAAM,CAAC,EAAE,CACV,CAAC;YAEF,8BAA8B;YAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;KACF;IAED,UAAU,EAAE;QACV;;WAEG;QACH,SAAS,EAAE,KAAK,EACd,KAAoB,EACpB,OAAsB,EACI,EAAE;YAC5B,eAAe,CACb,kBAAkB,EAClB,KAAK,EACL;gBACE,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE;aAC7C,EACD,OAAO,CAAC,EAAE,CACX,CAAC;YAEF,oDAAoD;YACpD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;KACF;IAED,KAAK,EAAE;QACL;;WAEG;QACH,YAAY,EAAE,KAAK,EAAE,UAA2B,EAAiB,EAAE;YACjE,+CAA+C;YAC/C,MAAM,WAAW,GAAkB;gBACjC,GAAG,EAAE,UAAU,CAAC,QAAQ;gBACxB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO;aACjB,CAAC;YAEF,eAAe,CACb,eAAe,EACf,WAAW,EACX;gBACE,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC7C,cAAc,EAAE,UAAU,CAAC,cAAc;aAC1C,EACD,UAAU,CAAC,EAAE,CACd,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,WAAW,EAAE,KAAK,EAChB,KAAoB,EACpB,UAA2B,EACK,EAAE;YAClC,sDAAsD;YACtD,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;YAC3C,IAAI,QAAQ,GAAG,YAAY,CAAC;YAC5B,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;gBACxB,KAAK,WAAW;oBACd,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM;gBACR,KAAK,WAAW;oBACd,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChE,MAAM;gBACR,KAAK,KAAK;oBACR,QAAQ,GAAG,UAAU,CAAC,KAAK,IAAI,YAAY,CAAC;oBAC5C,MAAM;YACV,CAAC;YAED,MAAM,WAAW,GAAG,CAAC,KAAa,EAAiC,EAAE;gBACnE,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,gBAAgB;gBAC7C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,eAAe;gBAC5C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,aAAa;gBAC1C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,cAAc;gBAC3C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,eAAe;gBAC5C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,iBAAiB;gBAC9C,IAAI,KAAK,IAAI,GAAG;oBAAE,OAAO,CAAC,CAAC,CAAE,cAAc;gBAC3C,OAAO,CAAC,CAAC,CAAoB,aAAa;YAC5C,CAAC,CAAC;YAEF,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YAEtC,eAAe,CAAC,gBAAgB,EAAE,KAAK,EAAE;gBACvC,cAAc,EAAE,UAAU,CAAC,IAAI;gBAC/B,gBAAgB,EAAE,UAAU,CAAC,MAAM;gBACnC,eAAe,EAAE,UAAU,CAAC,KAAK;gBACjC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,aAAa,EAAE,YAAY;gBAC3B,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,WAAW,EAAE,YAAY,KAAK,OAAO;aACtC,CAAC,CAAC;YAEH,OAAO;gBACL,aAAa,EAAE,YAAY;gBAC3B,QAAQ;gBACR,YAAY;gBACZ,OAAO;gBACP,WAAW,EAAE,YAAY,KAAK,OAAO;aACtC,CAAC;QACJ,CAAC;QAED;;WAEG;QACH,iBAAiB,EAAE,KAAK,EACtB,WAAwB,EACgB,EAAE;YAC1C,6BAA6B;YAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,GAAG,GAAG,CAAC;YAC/C,MAAM,UAAU,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC;YAExC,oDAAoD;YACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,cAAc;YAE9C,oDAAoD;YACpD,MAAM,cAAc,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAEhE,MAAM,KAAK,GACT,UAAU,IAAI,UAAU,IAAI,iBAAiB,IAAI,cAAc,CAAC;YAElE,wCAAwC;YACxC,MAAM,WAAW,GAAkB;gBACjC,GAAG,EAAE,WAAW,CAAC,QAAQ;gBACzB,KAAK,EAAE,OAAO,WAAW,CAAC,QAAQ,EAAE;gBACpC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,OAAO;aACjB,CAAC;YAEF,eAAe,CACb,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,oBAAoB,EACrD,WAAW,EACX;gBACE,aAAa,EAAE,WAAW,CAAC,EAAE;gBAC7B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAC5C,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC9C,KAAK;gBACL,UAAU;gBACV,UAAU;gBACV,cAAc;gBACd,iBAAiB;aAClB,EACD,WAAW,CAAC,EAAE,CACf,CAAC;YAEF,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;YAE9B,IAAI,CAAC,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC7D,IAAI,CAAC,cAAc;gBAAE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACjE,IAAI,CAAC,iBAAiB;gBAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAErE,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAC3E,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACrD,CAAC;YAED,OAAO;gBACL,KAAK;gBACL,MAAM;gBACN,QAAQ;gBACR,cAAc;gBACd,iBAAiB;gBACjB,UAAU;gBACV,UAAU;aACX,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA6B;IAE7B,yCAAyC;IACzC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,eAAe,cAAc,CAAC"}

package/dist/car-extensions/builtin-extensions/governance.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Cognigate Governance Extension
+ *
+ * Provides runtime governance and policy enforcement for AI agents.
+ * Integrates with Vorion's enforce module for policy decisions.
+ *
+ * @packageDocumentation
+ * @module @vorion/car-extensions/builtin-extensions/governance
+ * @license Apache-2.0
+ */
+import type { CARExtension, Constraint } from '../types.js';
+/**
+ * Cognigate Governance Extension
+ *
+ * Provides comprehensive runtime governance including:
+ * - Capability pre-check with constraint enforcement
+ * - Action pre-check with policy evaluation
+ * - Behavioral drift detection and monitoring
+ * - Trust score adjustment
+ * - Revocation handling
+ */
+export declare const cognigateExtension: CARExtension;
+/**
+ * Export factory function for creating governance extension
+ * with custom configuration
+ */
+export declare function createGovernanceExtension(config?: {
+    defaultConstraints?: Constraint[];
+    trustScoreDecayRate?: number;
+}): CARExtension;
+export default cognigateExtension;
+//# sourceMappingURL=governance.d.ts.map

package/dist/car-extensions/builtin-extensions/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../../src/car-extensions/builtin-extensions/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EACV,YAAY,EAeZ,UAAU,EAEX,MAAM,aAAa,CAAC;AA6TrB;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,YAoVhC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,CAAC,EAAE;IACjD,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,YAAY,CAGf;AAED,eAAe,kBAAkB,CAAC"}