@vorionsys/proof-plane 0.1.0

package/dist/proof-plane/logger.js

@@ -0,0 +1,48 @@
+/**
+ * Proof Plane Logger - Implements the ProofPlaneLogger interface for A3I
+ *
+ * This bridges the A3I authorization engine with the Vorion proof plane,
+ * automatically logging authorization decisions to the audit trail.
+ */
+/**
+ * ProofPlaneLoggerImpl - Logs A3I events to the proof plane
+ */
+export class ProofPlaneLoggerImpl {
+    proofPlane;
+    logIntentReceived;
+    logDecisionMade;
+    constructor(config) {
+        this.proofPlane = config.proofPlane;
+        this.logIntentReceived = config.logIntentReceived ?? true;
+        this.logDecisionMade = config.logDecisionMade ?? true;
+    }
+    /**
+     * Log a decision (and optionally the intent)
+     */
+    async logDecision(decision, intent) {
+        const correlationId = decision.correlationId;
+        // Log intent received if enabled
+        if (this.logIntentReceived) {
+            await this.proofPlane.logIntentReceived(intent, correlationId);
+        }
+        // Log decision made if enabled
+        if (this.logDecisionMade) {
+            await this.proofPlane.logDecisionMade(decision, correlationId);
+        }
+    }
+}
+/**
+ * Create a proof plane logger
+ */
+export function createProofPlaneLogger(config) {
+    return new ProofPlaneLoggerImpl(config);
+}
+/**
+ * No-op logger for when proof plane is not connected
+ */
+export const noopProofPlaneLogger = {
+    async logDecision(_decision, _intent) {
+        // No-op
+    },
+};
+//# sourceMappingURL=logger.js.map

package/dist/proof-plane/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/proof-plane/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwBH;;GAEG;AACH,MAAM,OAAO,oBAAoB;IACd,UAAU,CAAa;IACvB,iBAAiB,CAAU;IAC3B,eAAe,CAAU;IAE1C,YAAY,MAA8B;QACxC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAC1D,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,MAAc;QAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QAE7C,iCAAiC;QACjC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;QAED,+BAA+B;QAC/B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,OAAO,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,KAAK,CAAC,WAAW,CAAC,SAAmB,EAAE,OAAe;QACpD,QAAQ;IACV,CAAC;CACF,CAAC"}

package/dist/proof-plane/proof-plane.d.ts

@@ -0,0 +1,263 @@
+/**
+ * Proof Plane - High-level interface for the Vorion audit system
+ *
+ * The Proof Plane provides a unified API for:
+ * - Emitting proof events
+ * - Querying the event trail
+ * - Verifying chain integrity
+ * - Subscribing to events
+ * - Hook integration for EVENT_EMITTED notifications
+ */
+import { ProofEventType, type ProofEvent, type ProofEventFilter, type ProofEventPayload, type Intent, type Decision, type TrustProfile, type ShadowModeStatus } from '@vorion/contracts';
+import { type ProofEventStore, type EventQueryOptions, type EventQueryResult, type EventStats } from '../events/event-store.js';
+import { type ProofEventEmitter, type EmitResult, type EventListener } from '../events/event-emitter.js';
+import { type ChainVerificationResult } from '../events/hash-chain.js';
+import { type EventSigningService, type SignatureVerificationResult, type BatchVerificationResult } from '../events/event-signatures.js';
+/**
+ * Hook manager interface for event notifications
+ * (Implemented by @vorion/a3i HookManager)
+ */
+export interface EventHookManager {
+    executeEventEmitted(context: {
+        correlationId: string;
+        event: ProofEvent;
+    }): Promise<{
+        aborted: boolean;
+    }>;
+}
+/**
+ * Configuration for the Proof Plane
+ */
+export interface ProofPlaneConfig {
+    /** Custom event store (defaults to in-memory) */
+    store?: ProofEventStore;
+    /** Service identifier for signing events */
+    signedBy?: string;
+    /** Enable event listeners */
+    enableListeners?: boolean;
+    /** Hook manager for EVENT_EMITTED notifications */
+    hookManager?: EventHookManager;
+    /** Enable hooks (default: true if hookManager provided) */
+    enableHooks?: boolean;
+    /**
+     * Shadow mode configuration
+     *
+     * When enabled, all events are tagged with the specified shadow mode status.
+     * This is used for T0_SANDBOX agents whose events need HITL verification
+     * before counting toward production trust scores.
+     *
+     * @default 'production'
+     */
+    shadowMode?: ShadowModeStatus;
+    /**
+     * Environment tag for the proof plane instance
+     * Helps distinguish production vs testnet events
+     */
+    environment?: 'production' | 'testnet' | 'development';
+    /**
+     * Enable Ed25519 digital signatures for events
+     *
+     * When enabled, all emitted events will be cryptographically signed,
+     * providing authenticity and non-repudiation guarantees.
+     *
+     * @default false
+     */
+    enableSignatures?: boolean;
+    /**
+     * Signing service for Ed25519 signatures
+     *
+     * Required when enableSignatures is true.
+     * Can be shared across multiple ProofPlane instances.
+     */
+    signingService?: EventSigningService;
+    /**
+     * Private key for signing (base64-encoded Ed25519 private key)
+     *
+     * Alternative to signingService for simple single-key setups.
+     * If both signingService and privateKey are provided, signingService takes precedence.
+     */
+    privateKey?: string;
+}
+/**
+ * Proof Plane - The Vorion audit trail system
+ */
+export declare class ProofPlane {
+    private readonly store;
+    private readonly emitter;
+    private readonly signedBy;
+    private readonly hookManager?;
+    private readonly enableHooks;
+    private readonly shadowMode;
+    private readonly environment;
+    private readonly signingService?;
+    private readonly enableSignatures;
+    constructor(config?: ProofPlaneConfig);
+    /**
+     * Set up internal listener for hook notifications
+     */
+    private setupHookListener;
+    /**
+     * Fire the EVENT_EMITTED hook
+     */
+    private fireEventEmittedHook;
+    /**
+     * Log an intent received event
+     */
+    logIntentReceived(intent: Intent, correlationId?: string): Promise<EmitResult>;
+    /**
+     * Log an authorization decision event
+     */
+    logDecisionMade(decision: Decision, correlationId?: string): Promise<EmitResult>;
+    /**
+     * Log a trust score change event
+     */
+    logTrustDelta(agentId: string, previousProfile: TrustProfile, newProfile: TrustProfile, reason: string, correlationId?: string): Promise<EmitResult>;
+    /**
+     * Log execution started event
+     */
+    logExecutionStarted(executionId: string, actionId: string, decisionId: string, adapterId: string, agentId: string, correlationId: string): Promise<EmitResult>;
+    /**
+     * Log execution completed event
+     */
+    logExecutionCompleted(executionId: string, actionId: string, durationMs: number, outputHash: string, agentId: string, correlationId: string, status?: 'success' | 'partial'): Promise<EmitResult>;
+    /**
+     * Log execution failed event
+     */
+    logExecutionFailed(executionId: string, actionId: string, error: string, durationMs: number, retryable: boolean, agentId: string, correlationId: string): Promise<EmitResult>;
+    /**
+     * Log a generic proof event
+     */
+    logEvent(eventType: ProofEventType, correlationId: string, payload: ProofEventPayload, agentId?: string): Promise<EmitResult>;
+    /**
+     * Get an event by ID
+     */
+    getEvent(eventId: string): Promise<ProofEvent | null>;
+    /**
+     * Get the latest event
+     */
+    getLatestEvent(): Promise<ProofEvent | null>;
+    /**
+     * Query events with filters
+     */
+    queryEvents(filter?: ProofEventFilter, options?: EventQueryOptions): Promise<EventQueryResult>;
+    /**
+     * Get all events for a correlation ID (trace a request)
+     */
+    getTrace(correlationId: string): Promise<ProofEvent[]>;
+    /**
+     * Get all events for an agent
+     */
+    getAgentHistory(agentId: string, options?: EventQueryOptions): Promise<ProofEvent[]>;
+    /**
+     * Get events by type
+     */
+    getEventsByType(eventType: ProofEventType, options?: EventQueryOptions): Promise<ProofEvent[]>;
+    /**
+     * Get event statistics
+     */
+    getStats(): Promise<EventStats>;
+    /**
+     * Get event count
+     */
+    getEventCount(filter?: ProofEventFilter): Promise<number>;
+    /**
+     * Verify the entire event chain
+     */
+    verifyChain(fromEventId?: string, limit?: number): Promise<ChainVerificationResult>;
+    /**
+     * Verify chain integrity for a specific correlation ID
+     */
+    verifyCorrelationChain(correlationId: string): Promise<ChainVerificationResult>;
+    /**
+     * Check if signature verification is available
+     */
+    isSignatureVerificationEnabled(): boolean;
+    /**
+     * Check if this proof plane is configured for signing
+     */
+    isSigningEnabled(): boolean;
+    /**
+     * Get the signing service (if configured)
+     */
+    getSigningService(): EventSigningService | undefined;
+    /**
+     * Verify signature on a single event
+     *
+     * Requires a signing service with trusted keys configured.
+     */
+    verifyEventSignature(event: ProofEvent): Promise<SignatureVerificationResult>;
+    /**
+     * Verify signatures for multiple events
+     *
+     * Returns detailed results for each event.
+     */
+    verifySignatures(events: ProofEvent[]): Promise<BatchVerificationResult>;
+    /**
+     * Verify signatures for all events in a correlation chain
+     */
+    verifyCorrelationSignatures(correlationId: string): Promise<BatchVerificationResult>;
+    /**
+     * Verify both chain integrity AND signatures
+     *
+     * Returns combined verification results.
+     */
+    verifyChainAndSignatures(fromEventId?: string, limit?: number): Promise<{
+        chain: ChainVerificationResult;
+        signatures: BatchVerificationResult;
+        fullyVerified: boolean;
+    }>;
+    /**
+     * Subscribe to new events
+     */
+    subscribe(listener: EventListener): () => void;
+    /**
+     * Subscribe to events of a specific type
+     */
+    subscribeToType(eventType: ProofEventType, listener: EventListener): () => void;
+    /**
+     * Get the underlying event store
+     */
+    getStore(): ProofEventStore;
+    /**
+     * Get the event emitter
+     */
+    getEmitter(): ProofEventEmitter;
+    /**
+     * Get the hook manager
+     */
+    getHookManager(): EventHookManager | undefined;
+    /**
+     * Check if hooks are enabled
+     */
+    isHooksEnabled(): boolean;
+    /**
+     * Check if this proof plane is in shadow mode
+     */
+    isShadowMode(): boolean;
+    /**
+     * Get the current shadow mode status
+     */
+    getShadowMode(): ShadowModeStatus;
+    /**
+     * Get the environment tag
+     */
+    getEnvironment(): string;
+    /**
+     * Query shadow/testnet events that need HITL verification
+     */
+    getUnverifiedShadowEvents(agentId?: string, options?: EventQueryOptions): Promise<ProofEvent[]>;
+    /**
+     * Mark a shadow event as verified by HITL
+     * Note: This creates a new verification event, not modifying the original
+     */
+    verifyShadowEvent(eventId: string, verificationId: string, verifiedBy: string, approved: boolean): Promise<EmitResult>;
+    /**
+     * Clear all events (for testing only)
+     */
+    clear(): Promise<void>;
+}
+/**
+ * Create a Proof Plane instance
+ */
+export declare function createProofPlane(config?: ProofPlaneConfig): ProofPlane;
+//# sourceMappingURL=proof-plane.d.ts.map

package/dist/proof-plane/proof-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-plane.d.ts","sourceRoot":"","sources":["../../src/proof-plane/proof-plane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,cAAc,EAEd,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EAOjB,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,aAAa,EAEnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,EAE7B,MAAM,+BAA+B,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,CAAC,OAAO,EAAE;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,UAAU,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mDAAmD;IACnD,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;OAGG;IACH,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;IACvD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAmB;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2C;IACvE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAsB;IACtD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;gBAE/B,MAAM,GAAE,gBAAqB;IAyBzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IASzB;;OAEG;YACW,oBAAoB;IAalC;;OAEG;IACG,iBAAiB,CACrB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,UAAU,CAAC;IAiBtB;;OAEG;IACG,eAAe,CACnB,QAAQ,EAAE,QAAQ,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,UAAU,CAAC;IAmBtB;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,YAAY,EAC7B,UAAU,EAAE,YAAY,EACxB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,UAAU,CAAC;IAmBtB;;OAEG;IACG,mBAAmB,CACvB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC;IAiBtB;;OAEG;IACG,qBAAqB,CACzB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,MAAM,GAAE,SAAS,GAAG,SAAqB,GACxC,OAAO,CAAC,UAAU,CAAC;IAkBtB;;OAEG;IACG,kBAAkB,CACtB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC;IAkBtB;;OAEG;IACG,QAAQ,CACZ,SAAS,EAAE,cAAc,EACzB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC;IAQtB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI3D;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIlD;;OAEG;IACG,WAAW,CACf,MAAM,CAAC,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;OAEG;IACG,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI5D;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI1F;;OAEG;IACG,eAAe,CACnB,SAAS,EAAE,cAAc,EACzB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAIxB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAIrC;;OAEG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ/D;;OAEG;IACG,WAAW,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAKzF;;OAEG;IACG,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IASrF;;OAEG;IACH,8BAA8B,IAAI,OAAO;IAIzC;;OAEG;IACH,gBAAgB,IAAI,OAAO;IAI3B;;OAEG;IACH,iBAAiB,IAAI,mBAAmB,GAAG,SAAS;IAIpD;;;;OAIG;IACG,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAYnF;;;;OAIG;IACG,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAsB9E;;OAEG;IACG,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAK1F;;;;OAIG;IACG,wBAAwB,CAC5B,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QACT,KAAK,EAAE,uBAAuB,CAAC;QAC/B,UAAU,EAAE,uBAAuB,CAAC;QACpC,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAgBF;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAK9C;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,GAAG,MAAM,IAAI;IAc/E;;OAEG;IACH,QAAQ,IAAI,eAAe;IAI3B;;OAEG;IACH,UAAU,IAAI,iBAAiB;IAI/B;;OAEG;IACH,cAAc,IAAI,gBAAgB,GAAG,SAAS;IAI9C;;OAEG;IACH,cAAc,IAAI,OAAO;IAQzB;;OAEG;IACH,YAAY,IAAI,OAAO;IAIvB;;OAEG;IACH,aAAa,IAAI,gBAAgB;IAIjC;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACG,yBAAyB,CAC7B,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC;IAQxB;;;OAGG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,UAAU,CAAC;IA2BtB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAEtE"}