@vorionsys/security 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1843) hide show
  1. package/LICENSE +190 -0
  2. package/README.md +85 -0
  3. package/dist/aci-extensions/aci-string-extensions.d.ts +334 -0
  4. package/dist/aci-extensions/aci-string-extensions.d.ts.map +1 -0
  5. package/dist/aci-extensions/aci-string-extensions.js +435 -0
  6. package/dist/aci-extensions/aci-string-extensions.js.map +1 -0
  7. package/dist/aci-extensions/builtin-extensions/audit.d.ts +88 -0
  8. package/dist/aci-extensions/builtin-extensions/audit.d.ts.map +1 -0
  9. package/dist/aci-extensions/builtin-extensions/audit.js +444 -0
  10. package/dist/aci-extensions/builtin-extensions/audit.js.map +1 -0
  11. package/dist/aci-extensions/builtin-extensions/governance.d.ts +32 -0
  12. package/dist/aci-extensions/builtin-extensions/governance.d.ts.map +1 -0
  13. package/dist/aci-extensions/builtin-extensions/governance.js +533 -0
  14. package/dist/aci-extensions/builtin-extensions/governance.js.map +1 -0
  15. package/dist/aci-extensions/builtin-extensions/monitoring.d.ts +43 -0
  16. package/dist/aci-extensions/builtin-extensions/monitoring.d.ts.map +1 -0
  17. package/dist/aci-extensions/builtin-extensions/monitoring.js +416 -0
  18. package/dist/aci-extensions/builtin-extensions/monitoring.js.map +1 -0
  19. package/dist/aci-extensions/executor.d.ts +208 -0
  20. package/dist/aci-extensions/executor.d.ts.map +1 -0
  21. package/dist/aci-extensions/executor.js +789 -0
  22. package/dist/aci-extensions/executor.js.map +1 -0
  23. package/dist/aci-extensions/index.d.ts +6 -0
  24. package/dist/aci-extensions/index.d.ts.map +1 -0
  25. package/dist/aci-extensions/index.js +6 -0
  26. package/dist/aci-extensions/index.js.map +1 -0
  27. package/dist/aci-extensions/registry.d.ts +217 -0
  28. package/dist/aci-extensions/registry.d.ts.map +1 -0
  29. package/dist/aci-extensions/registry.js +443 -0
  30. package/dist/aci-extensions/registry.js.map +1 -0
  31. package/dist/aci-extensions/service.d.ts +220 -0
  32. package/dist/aci-extensions/service.d.ts.map +1 -0
  33. package/dist/aci-extensions/service.js +484 -0
  34. package/dist/aci-extensions/service.js.map +1 -0
  35. package/dist/aci-extensions/types.d.ts +2265 -0
  36. package/dist/aci-extensions/types.d.ts.map +1 -0
  37. package/dist/aci-extensions/types.js +389 -0
  38. package/dist/aci-extensions/types.js.map +1 -0
  39. package/dist/api/auth.d.ts +55 -0
  40. package/dist/api/auth.d.ts.map +1 -0
  41. package/dist/api/auth.js +306 -0
  42. package/dist/api/auth.js.map +1 -0
  43. package/dist/api/errors.d.ts +146 -0
  44. package/dist/api/errors.d.ts.map +1 -0
  45. package/dist/api/errors.js +464 -0
  46. package/dist/api/errors.js.map +1 -0
  47. package/dist/api/index.d.ts +16 -0
  48. package/dist/api/index.d.ts.map +1 -0
  49. package/dist/api/index.js +19 -0
  50. package/dist/api/index.js.map +1 -0
  51. package/dist/api/middleware/api-key-enforcement.d.ts +131 -0
  52. package/dist/api/middleware/api-key-enforcement.d.ts.map +1 -0
  53. package/dist/api/middleware/api-key-enforcement.js +674 -0
  54. package/dist/api/middleware/api-key-enforcement.js.map +1 -0
  55. package/dist/api/middleware/audit.d.ts +151 -0
  56. package/dist/api/middleware/audit.d.ts.map +1 -0
  57. package/dist/api/middleware/audit.js +384 -0
  58. package/dist/api/middleware/audit.js.map +1 -0
  59. package/dist/api/middleware/dpop-enforcement.d.ts +176 -0
  60. package/dist/api/middleware/dpop-enforcement.d.ts.map +1 -0
  61. package/dist/api/middleware/dpop-enforcement.js +596 -0
  62. package/dist/api/middleware/dpop-enforcement.js.map +1 -0
  63. package/dist/api/middleware/index.d.ts +23 -0
  64. package/dist/api/middleware/index.d.ts.map +1 -0
  65. package/dist/api/middleware/index.js +41 -0
  66. package/dist/api/middleware/index.js.map +1 -0
  67. package/dist/api/middleware/metrics.d.ts +41 -0
  68. package/dist/api/middleware/metrics.d.ts.map +1 -0
  69. package/dist/api/middleware/metrics.js +150 -0
  70. package/dist/api/middleware/metrics.js.map +1 -0
  71. package/dist/api/middleware/rate-limits.d.ts +224 -0
  72. package/dist/api/middleware/rate-limits.d.ts.map +1 -0
  73. package/dist/api/middleware/rate-limits.js +686 -0
  74. package/dist/api/middleware/rate-limits.js.map +1 -0
  75. package/dist/api/middleware/rateLimit.d.ts +165 -0
  76. package/dist/api/middleware/rateLimit.d.ts.map +1 -0
  77. package/dist/api/middleware/rateLimit.js +477 -0
  78. package/dist/api/middleware/rateLimit.js.map +1 -0
  79. package/dist/api/middleware/redis-rate-limiter.d.ts +279 -0
  80. package/dist/api/middleware/redis-rate-limiter.d.ts.map +1 -0
  81. package/dist/api/middleware/redis-rate-limiter.js +1074 -0
  82. package/dist/api/middleware/redis-rate-limiter.js.map +1 -0
  83. package/dist/api/middleware/security.d.ts +156 -0
  84. package/dist/api/middleware/security.d.ts.map +1 -0
  85. package/dist/api/middleware/security.js +412 -0
  86. package/dist/api/middleware/security.js.map +1 -0
  87. package/dist/api/middleware/validation.d.ts +132 -0
  88. package/dist/api/middleware/validation.d.ts.map +1 -0
  89. package/dist/api/middleware/validation.js +363 -0
  90. package/dist/api/middleware/validation.js.map +1 -0
  91. package/dist/api/middleware/webhook-verify.d.ts +130 -0
  92. package/dist/api/middleware/webhook-verify.d.ts.map +1 -0
  93. package/dist/api/middleware/webhook-verify.js +366 -0
  94. package/dist/api/middleware/webhook-verify.js.map +1 -0
  95. package/dist/api/rate-limit.d.ts +115 -0
  96. package/dist/api/rate-limit.d.ts.map +1 -0
  97. package/dist/api/rate-limit.js +335 -0
  98. package/dist/api/rate-limit.js.map +1 -0
  99. package/dist/api/routes/extensions.d.ts +40 -0
  100. package/dist/api/routes/extensions.d.ts.map +1 -0
  101. package/dist/api/routes/extensions.js +434 -0
  102. package/dist/api/routes/extensions.js.map +1 -0
  103. package/dist/api/routes/mfa.d.ts +44 -0
  104. package/dist/api/routes/mfa.d.ts.map +1 -0
  105. package/dist/api/routes/mfa.js +270 -0
  106. package/dist/api/routes/mfa.js.map +1 -0
  107. package/dist/api/server.d.ts +37 -0
  108. package/dist/api/server.d.ts.map +1 -0
  109. package/dist/api/server.js +1967 -0
  110. package/dist/api/server.js.map +1 -0
  111. package/dist/api/v1/admin.d.ts +11 -0
  112. package/dist/api/v1/admin.d.ts.map +1 -0
  113. package/dist/api/v1/admin.js +207 -0
  114. package/dist/api/v1/admin.js.map +1 -0
  115. package/dist/api/v1/audit.d.ts +14 -0
  116. package/dist/api/v1/audit.d.ts.map +1 -0
  117. package/dist/api/v1/audit.js +376 -0
  118. package/dist/api/v1/audit.js.map +1 -0
  119. package/dist/api/v1/auth.d.ts +17 -0
  120. package/dist/api/v1/auth.d.ts.map +1 -0
  121. package/dist/api/v1/auth.js +637 -0
  122. package/dist/api/v1/auth.js.map +1 -0
  123. package/dist/api/v1/compliance.d.ts +62 -0
  124. package/dist/api/v1/compliance.d.ts.map +1 -0
  125. package/dist/api/v1/compliance.js +858 -0
  126. package/dist/api/v1/compliance.js.map +1 -0
  127. package/dist/api/v1/constraints.d.ts +11 -0
  128. package/dist/api/v1/constraints.d.ts.map +1 -0
  129. package/dist/api/v1/constraints.js +71 -0
  130. package/dist/api/v1/constraints.js.map +1 -0
  131. package/dist/api/v1/dashboard.d.ts +224 -0
  132. package/dist/api/v1/dashboard.d.ts.map +1 -0
  133. package/dist/api/v1/dashboard.js +833 -0
  134. package/dist/api/v1/dashboard.js.map +1 -0
  135. package/dist/api/v1/docs.d.ts +11 -0
  136. package/dist/api/v1/docs.d.ts.map +1 -0
  137. package/dist/api/v1/docs.js +95 -0
  138. package/dist/api/v1/docs.js.map +1 -0
  139. package/dist/api/v1/escalations.d.ts +11 -0
  140. package/dist/api/v1/escalations.d.ts.map +1 -0
  141. package/dist/api/v1/escalations.js +857 -0
  142. package/dist/api/v1/escalations.js.map +1 -0
  143. package/dist/api/v1/gdpr.d.ts +11 -0
  144. package/dist/api/v1/gdpr.d.ts.map +1 -0
  145. package/dist/api/v1/gdpr.js +220 -0
  146. package/dist/api/v1/gdpr.js.map +1 -0
  147. package/dist/api/v1/health.d.ts +22 -0
  148. package/dist/api/v1/health.d.ts.map +1 -0
  149. package/dist/api/v1/health.js +512 -0
  150. package/dist/api/v1/health.js.map +1 -0
  151. package/dist/api/v1/index.d.ts +22 -0
  152. package/dist/api/v1/index.d.ts.map +1 -0
  153. package/dist/api/v1/index.js +81 -0
  154. package/dist/api/v1/index.js.map +1 -0
  155. package/dist/api/v1/intents.d.ts +11 -0
  156. package/dist/api/v1/intents.d.ts.map +1 -0
  157. package/dist/api/v1/intents.js +239 -0
  158. package/dist/api/v1/intents.js.map +1 -0
  159. package/dist/api/v1/operations.d.ts +21 -0
  160. package/dist/api/v1/operations.d.ts.map +1 -0
  161. package/dist/api/v1/operations.js +140 -0
  162. package/dist/api/v1/operations.js.map +1 -0
  163. package/dist/api/v1/policies.d.ts +11 -0
  164. package/dist/api/v1/policies.d.ts.map +1 -0
  165. package/dist/api/v1/policies.js +763 -0
  166. package/dist/api/v1/policies.js.map +1 -0
  167. package/dist/api/v1/proofs.d.ts +13 -0
  168. package/dist/api/v1/proofs.d.ts.map +1 -0
  169. package/dist/api/v1/proofs.js +239 -0
  170. package/dist/api/v1/proofs.js.map +1 -0
  171. package/dist/api/v1/security-dashboard.d.ts +1090 -0
  172. package/dist/api/v1/security-dashboard.d.ts.map +1 -0
  173. package/dist/api/v1/security-dashboard.js +755 -0
  174. package/dist/api/v1/security-dashboard.js.map +1 -0
  175. package/dist/api/v1/service-accounts.d.ts +16 -0
  176. package/dist/api/v1/service-accounts.d.ts.map +1 -0
  177. package/dist/api/v1/service-accounts.js +563 -0
  178. package/dist/api/v1/service-accounts.js.map +1 -0
  179. package/dist/api/v1/sessions.d.ts +36 -0
  180. package/dist/api/v1/sessions.d.ts.map +1 -0
  181. package/dist/api/v1/sessions.js +333 -0
  182. package/dist/api/v1/sessions.js.map +1 -0
  183. package/dist/api/v1/trust.d.ts +14 -0
  184. package/dist/api/v1/trust.d.ts.map +1 -0
  185. package/dist/api/v1/trust.js +578 -0
  186. package/dist/api/v1/trust.js.map +1 -0
  187. package/dist/api/v1/webhooks.d.ts +11 -0
  188. package/dist/api/v1/webhooks.d.ts.map +1 -0
  189. package/dist/api/v1/webhooks.js +250 -0
  190. package/dist/api/v1/webhooks.js.map +1 -0
  191. package/dist/api/v2/trust.d.ts +20 -0
  192. package/dist/api/v2/trust.d.ts.map +1 -0
  193. package/dist/api/v2/trust.js +362 -0
  194. package/dist/api/v2/trust.js.map +1 -0
  195. package/dist/api/validation.d.ts +243 -0
  196. package/dist/api/validation.d.ts.map +1 -0
  197. package/dist/api/validation.js +247 -0
  198. package/dist/api/validation.js.map +1 -0
  199. package/dist/api/versioning/backward-compat.d.ts +28 -0
  200. package/dist/api/versioning/backward-compat.d.ts.map +1 -0
  201. package/dist/api/versioning/backward-compat.js +161 -0
  202. package/dist/api/versioning/backward-compat.js.map +1 -0
  203. package/dist/api/versioning/index.d.ts +112 -0
  204. package/dist/api/versioning/index.d.ts.map +1 -0
  205. package/dist/api/versioning/index.js +199 -0
  206. package/dist/api/versioning/index.js.map +1 -0
  207. package/dist/audit/compliance-reporter.d.ts +271 -0
  208. package/dist/audit/compliance-reporter.d.ts.map +1 -0
  209. package/dist/audit/compliance-reporter.js +587 -0
  210. package/dist/audit/compliance-reporter.js.map +1 -0
  211. package/dist/audit/db-store.d.ts +689 -0
  212. package/dist/audit/db-store.d.ts.map +1 -0
  213. package/dist/audit/db-store.js +589 -0
  214. package/dist/audit/db-store.js.map +1 -0
  215. package/dist/audit/event-schema.d.ts +605 -0
  216. package/dist/audit/event-schema.d.ts.map +1 -0
  217. package/dist/audit/event-schema.js +566 -0
  218. package/dist/audit/event-schema.js.map +1 -0
  219. package/dist/audit/index.d.ts +16 -0
  220. package/dist/audit/index.d.ts.map +1 -0
  221. package/dist/audit/index.js +44 -0
  222. package/dist/audit/index.js.map +1 -0
  223. package/dist/audit/security-events.d.ts +1624 -0
  224. package/dist/audit/security-events.d.ts.map +1 -0
  225. package/dist/audit/security-events.js +775 -0
  226. package/dist/audit/security-events.js.map +1 -0
  227. package/dist/audit/security-logger.d.ts +288 -0
  228. package/dist/audit/security-logger.d.ts.map +1 -0
  229. package/dist/audit/security-logger.js +820 -0
  230. package/dist/audit/security-logger.js.map +1 -0
  231. package/dist/audit/service.d.ts +206 -0
  232. package/dist/audit/service.d.ts.map +1 -0
  233. package/dist/audit/service.js +756 -0
  234. package/dist/audit/service.js.map +1 -0
  235. package/dist/audit/siem/elastic.d.ts +94 -0
  236. package/dist/audit/siem/elastic.d.ts.map +1 -0
  237. package/dist/audit/siem/elastic.js +411 -0
  238. package/dist/audit/siem/elastic.js.map +1 -0
  239. package/dist/audit/siem/index.d.ts +179 -0
  240. package/dist/audit/siem/index.d.ts.map +1 -0
  241. package/dist/audit/siem/index.js +368 -0
  242. package/dist/audit/siem/index.js.map +1 -0
  243. package/dist/audit/siem/loki.d.ts +100 -0
  244. package/dist/audit/siem/loki.d.ts.map +1 -0
  245. package/dist/audit/siem/loki.js +405 -0
  246. package/dist/audit/siem/loki.js.map +1 -0
  247. package/dist/audit/siem/splunk.d.ts +91 -0
  248. package/dist/audit/siem/splunk.d.ts.map +1 -0
  249. package/dist/audit/siem/splunk.js +374 -0
  250. package/dist/audit/siem/splunk.js.map +1 -0
  251. package/dist/audit/siem/types.d.ts +547 -0
  252. package/dist/audit/siem/types.d.ts.map +1 -0
  253. package/dist/audit/siem/types.js +270 -0
  254. package/dist/audit/siem/types.js.map +1 -0
  255. package/dist/audit/types.d.ts +405 -0
  256. package/dist/audit/types.d.ts.map +1 -0
  257. package/dist/audit/types.js +121 -0
  258. package/dist/audit/types.js.map +1 -0
  259. package/dist/auth/mfa/index.d.ts +66 -0
  260. package/dist/auth/mfa/index.d.ts.map +1 -0
  261. package/dist/auth/mfa/index.js +15 -0
  262. package/dist/auth/mfa/index.js.map +1 -0
  263. package/dist/auth/mfa/totp.d.ts +221 -0
  264. package/dist/auth/mfa/totp.d.ts.map +1 -0
  265. package/dist/auth/mfa/totp.js +324 -0
  266. package/dist/auth/mfa/totp.js.map +1 -0
  267. package/dist/auth/mfa/webauthn.d.ts +224 -0
  268. package/dist/auth/mfa/webauthn.d.ts.map +1 -0
  269. package/dist/auth/mfa/webauthn.js +409 -0
  270. package/dist/auth/mfa/webauthn.js.map +1 -0
  271. package/dist/auth/sso/index.d.ts +247 -0
  272. package/dist/auth/sso/index.d.ts.map +1 -0
  273. package/dist/auth/sso/index.js +763 -0
  274. package/dist/auth/sso/index.js.map +1 -0
  275. package/dist/auth/sso/oidc-provider.d.ts +146 -0
  276. package/dist/auth/sso/oidc-provider.d.ts.map +1 -0
  277. package/dist/auth/sso/oidc-provider.js +589 -0
  278. package/dist/auth/sso/oidc-provider.js.map +1 -0
  279. package/dist/auth/sso/types.d.ts +488 -0
  280. package/dist/auth/sso/types.d.ts.map +1 -0
  281. package/dist/auth/sso/types.js +73 -0
  282. package/dist/auth/sso/types.js.map +1 -0
  283. package/dist/basis/evaluator.d.ts +70 -0
  284. package/dist/basis/evaluator.d.ts.map +1 -0
  285. package/dist/basis/evaluator.js +269 -0
  286. package/dist/basis/evaluator.js.map +1 -0
  287. package/dist/basis/expression-evaluator.d.ts +77 -0
  288. package/dist/basis/expression-evaluator.d.ts.map +1 -0
  289. package/dist/basis/expression-evaluator.js +826 -0
  290. package/dist/basis/expression-evaluator.js.map +1 -0
  291. package/dist/basis/index.d.ts +13 -0
  292. package/dist/basis/index.d.ts.map +1 -0
  293. package/dist/basis/index.js +13 -0
  294. package/dist/basis/index.js.map +1 -0
  295. package/dist/basis/parser.d.ts +376 -0
  296. package/dist/basis/parser.d.ts.map +1 -0
  297. package/dist/basis/parser.js +174 -0
  298. package/dist/basis/parser.js.map +1 -0
  299. package/dist/basis/types.d.ts +115 -0
  300. package/dist/basis/types.d.ts.map +1 -0
  301. package/dist/basis/types.js +5 -0
  302. package/dist/basis/types.js.map +1 -0
  303. package/dist/car-extensions/builtin-extensions/audit.d.ts +88 -0
  304. package/dist/car-extensions/builtin-extensions/audit.d.ts.map +1 -0
  305. package/dist/car-extensions/builtin-extensions/audit.js +444 -0
  306. package/dist/car-extensions/builtin-extensions/audit.js.map +1 -0
  307. package/dist/car-extensions/builtin-extensions/governance.d.ts +32 -0
  308. package/dist/car-extensions/builtin-extensions/governance.d.ts.map +1 -0
  309. package/dist/car-extensions/builtin-extensions/governance.js +533 -0
  310. package/dist/car-extensions/builtin-extensions/governance.js.map +1 -0
  311. package/dist/car-extensions/builtin-extensions/monitoring.d.ts +43 -0
  312. package/dist/car-extensions/builtin-extensions/monitoring.d.ts.map +1 -0
  313. package/dist/car-extensions/builtin-extensions/monitoring.js +416 -0
  314. package/dist/car-extensions/builtin-extensions/monitoring.js.map +1 -0
  315. package/dist/car-extensions/car-string-extensions.d.ts +334 -0
  316. package/dist/car-extensions/car-string-extensions.d.ts.map +1 -0
  317. package/dist/car-extensions/car-string-extensions.js +435 -0
  318. package/dist/car-extensions/car-string-extensions.js.map +1 -0
  319. package/dist/car-extensions/executor.d.ts +208 -0
  320. package/dist/car-extensions/executor.d.ts.map +1 -0
  321. package/dist/car-extensions/executor.js +789 -0
  322. package/dist/car-extensions/executor.js.map +1 -0
  323. package/dist/car-extensions/index.d.ts +94 -0
  324. package/dist/car-extensions/index.d.ts.map +1 -0
  325. package/dist/car-extensions/index.js +157 -0
  326. package/dist/car-extensions/index.js.map +1 -0
  327. package/dist/car-extensions/registry.d.ts +217 -0
  328. package/dist/car-extensions/registry.d.ts.map +1 -0
  329. package/dist/car-extensions/registry.js +443 -0
  330. package/dist/car-extensions/registry.js.map +1 -0
  331. package/dist/car-extensions/service.d.ts +220 -0
  332. package/dist/car-extensions/service.d.ts.map +1 -0
  333. package/dist/car-extensions/service.js +484 -0
  334. package/dist/car-extensions/service.js.map +1 -0
  335. package/dist/car-extensions/types.d.ts +2265 -0
  336. package/dist/car-extensions/types.d.ts.map +1 -0
  337. package/dist/car-extensions/types.js +389 -0
  338. package/dist/car-extensions/types.js.map +1 -0
  339. package/dist/cognigate/index.d.ts +139 -0
  340. package/dist/cognigate/index.d.ts.map +1 -0
  341. package/dist/cognigate/index.js +404 -0
  342. package/dist/cognigate/index.js.map +1 -0
  343. package/dist/cognigate/lua-scripts.d.ts +96 -0
  344. package/dist/cognigate/lua-scripts.d.ts.map +1 -0
  345. package/dist/cognigate/lua-scripts.js +264 -0
  346. package/dist/cognigate/lua-scripts.js.map +1 -0
  347. package/dist/cognigate/metrics.d.ts +112 -0
  348. package/dist/cognigate/metrics.d.ts.map +1 -0
  349. package/dist/cognigate/metrics.js +229 -0
  350. package/dist/cognigate/metrics.js.map +1 -0
  351. package/dist/cognigate/output-integration.d.ts +86 -0
  352. package/dist/cognigate/output-integration.d.ts.map +1 -0
  353. package/dist/cognigate/output-integration.js +184 -0
  354. package/dist/cognigate/output-integration.js.map +1 -0
  355. package/dist/cognigate/resource-interceptors.d.ts +77 -0
  356. package/dist/cognigate/resource-interceptors.d.ts.map +1 -0
  357. package/dist/cognigate/resource-interceptors.js +143 -0
  358. package/dist/cognigate/resource-interceptors.js.map +1 -0
  359. package/dist/cognigate/resource-state-provider.d.ts +103 -0
  360. package/dist/cognigate/resource-state-provider.d.ts.map +1 -0
  361. package/dist/cognigate/resource-state-provider.js +195 -0
  362. package/dist/cognigate/resource-state-provider.js.map +1 -0
  363. package/dist/cognigate/resource-tracker.d.ts +85 -0
  364. package/dist/cognigate/resource-tracker.d.ts.map +1 -0
  365. package/dist/cognigate/resource-tracker.js +216 -0
  366. package/dist/cognigate/resource-tracker.js.map +1 -0
  367. package/dist/cognigate/types.d.ts +199 -0
  368. package/dist/cognigate/types.d.ts.map +1 -0
  369. package/dist/cognigate/types.js +11 -0
  370. package/dist/cognigate/types.js.map +1 -0
  371. package/dist/common/adapters/index.d.ts +34 -0
  372. package/dist/common/adapters/index.d.ts.map +1 -0
  373. package/dist/common/adapters/index.js +46 -0
  374. package/dist/common/adapters/index.js.map +1 -0
  375. package/dist/common/adapters/memory-cache.d.ts +91 -0
  376. package/dist/common/adapters/memory-cache.d.ts.map +1 -0
  377. package/dist/common/adapters/memory-cache.js +201 -0
  378. package/dist/common/adapters/memory-cache.js.map +1 -0
  379. package/dist/common/adapters/memory-lock.d.ts +75 -0
  380. package/dist/common/adapters/memory-lock.d.ts.map +1 -0
  381. package/dist/common/adapters/memory-lock.js +219 -0
  382. package/dist/common/adapters/memory-lock.js.map +1 -0
  383. package/dist/common/adapters/memory-queue.d.ts +64 -0
  384. package/dist/common/adapters/memory-queue.d.ts.map +1 -0
  385. package/dist/common/adapters/memory-queue.js +233 -0
  386. package/dist/common/adapters/memory-queue.js.map +1 -0
  387. package/dist/common/adapters/memory-ratelimit.d.ts +78 -0
  388. package/dist/common/adapters/memory-ratelimit.d.ts.map +1 -0
  389. package/dist/common/adapters/memory-ratelimit.js +196 -0
  390. package/dist/common/adapters/memory-ratelimit.js.map +1 -0
  391. package/dist/common/adapters/memory-session.d.ts +105 -0
  392. package/dist/common/adapters/memory-session.d.ts.map +1 -0
  393. package/dist/common/adapters/memory-session.js +302 -0
  394. package/dist/common/adapters/memory-session.js.map +1 -0
  395. package/dist/common/adapters/provider.d.ts +47 -0
  396. package/dist/common/adapters/provider.d.ts.map +1 -0
  397. package/dist/common/adapters/provider.js +347 -0
  398. package/dist/common/adapters/provider.js.map +1 -0
  399. package/dist/common/adapters/types.d.ts +247 -0
  400. package/dist/common/adapters/types.d.ts.map +1 -0
  401. package/dist/common/adapters/types.js +11 -0
  402. package/dist/common/adapters/types.js.map +1 -0
  403. package/dist/common/authorization.d.ts +137 -0
  404. package/dist/common/authorization.d.ts.map +1 -0
  405. package/dist/common/authorization.js +270 -0
  406. package/dist/common/authorization.js.map +1 -0
  407. package/dist/common/canonical-bridge.d.ts +151 -0
  408. package/dist/common/canonical-bridge.d.ts.map +1 -0
  409. package/dist/common/canonical-bridge.js +231 -0
  410. package/dist/common/canonical-bridge.js.map +1 -0
  411. package/dist/common/canonical-json.d.ts +64 -0
  412. package/dist/common/canonical-json.d.ts.map +1 -0
  413. package/dist/common/canonical-json.js +95 -0
  414. package/dist/common/canonical-json.js.map +1 -0
  415. package/dist/common/circuit-breaker.d.ts +320 -0
  416. package/dist/common/circuit-breaker.d.ts.map +1 -0
  417. package/dist/common/circuit-breaker.js +850 -0
  418. package/dist/common/circuit-breaker.js.map +1 -0
  419. package/dist/common/config.d.ts +1678 -0
  420. package/dist/common/config.d.ts.map +1 -0
  421. package/dist/common/config.js +1057 -0
  422. package/dist/common/config.js.map +1 -0
  423. package/dist/common/contracts/index.d.ts +2 -0
  424. package/dist/common/contracts/index.d.ts.map +1 -0
  425. package/dist/common/contracts/index.js +2 -0
  426. package/dist/common/contracts/index.js.map +1 -0
  427. package/dist/common/contracts/output.d.ts +81 -0
  428. package/dist/common/contracts/output.d.ts.map +1 -0
  429. package/dist/common/contracts/output.js +38 -0
  430. package/dist/common/contracts/output.js.map +1 -0
  431. package/dist/common/crypto.d.ts +70 -0
  432. package/dist/common/crypto.d.ts.map +1 -0
  433. package/dist/common/crypto.js +201 -0
  434. package/dist/common/crypto.js.map +1 -0
  435. package/dist/common/database-resilience.d.ts +156 -0
  436. package/dist/common/database-resilience.d.ts.map +1 -0
  437. package/dist/common/database-resilience.js +269 -0
  438. package/dist/common/database-resilience.js.map +1 -0
  439. package/dist/common/db-metrics.d.ts +90 -0
  440. package/dist/common/db-metrics.d.ts.map +1 -0
  441. package/dist/common/db-metrics.js +219 -0
  442. package/dist/common/db-metrics.js.map +1 -0
  443. package/dist/common/db-pool.d.ts +307 -0
  444. package/dist/common/db-pool.d.ts.map +1 -0
  445. package/dist/common/db-pool.js +879 -0
  446. package/dist/common/db-pool.js.map +1 -0
  447. package/dist/common/db.d.ts +105 -0
  448. package/dist/common/db.d.ts.map +1 -0
  449. package/dist/common/db.js +216 -0
  450. package/dist/common/db.js.map +1 -0
  451. package/dist/common/di.d.ts +202 -0
  452. package/dist/common/di.d.ts.map +1 -0
  453. package/dist/common/di.js +219 -0
  454. package/dist/common/di.js.map +1 -0
  455. package/dist/common/encryption.d.ts +131 -0
  456. package/dist/common/encryption.d.ts.map +1 -0
  457. package/dist/common/encryption.js +255 -0
  458. package/dist/common/encryption.js.map +1 -0
  459. package/dist/common/errors.d.ts +229 -0
  460. package/dist/common/errors.d.ts.map +1 -0
  461. package/dist/common/errors.js +349 -0
  462. package/dist/common/errors.js.map +1 -0
  463. package/dist/common/expression/evaluator.d.ts +58 -0
  464. package/dist/common/expression/evaluator.d.ts.map +1 -0
  465. package/dist/common/expression/evaluator.js +326 -0
  466. package/dist/common/expression/evaluator.js.map +1 -0
  467. package/dist/common/expression/index.d.ts +180 -0
  468. package/dist/common/expression/index.d.ts.map +1 -0
  469. package/dist/common/expression/index.js +198 -0
  470. package/dist/common/expression/index.js.map +1 -0
  471. package/dist/common/expression/lexer.d.ts +69 -0
  472. package/dist/common/expression/lexer.d.ts.map +1 -0
  473. package/dist/common/expression/lexer.js +255 -0
  474. package/dist/common/expression/lexer.js.map +1 -0
  475. package/dist/common/expression/parser.d.ts +133 -0
  476. package/dist/common/expression/parser.d.ts.map +1 -0
  477. package/dist/common/expression/parser.js +293 -0
  478. package/dist/common/expression/parser.js.map +1 -0
  479. package/dist/common/group-membership.d.ts +119 -0
  480. package/dist/common/group-membership.d.ts.map +1 -0
  481. package/dist/common/group-membership.js +250 -0
  482. package/dist/common/group-membership.js.map +1 -0
  483. package/dist/common/index.d.ts +14 -0
  484. package/dist/common/index.d.ts.map +1 -0
  485. package/dist/common/index.js +15 -0
  486. package/dist/common/index.js.map +1 -0
  487. package/dist/common/leader-election.d.ts +40 -0
  488. package/dist/common/leader-election.d.ts.map +1 -0
  489. package/dist/common/leader-election.js +232 -0
  490. package/dist/common/leader-election.js.map +1 -0
  491. package/dist/common/lock.d.ts +77 -0
  492. package/dist/common/lock.d.ts.map +1 -0
  493. package/dist/common/lock.js +167 -0
  494. package/dist/common/lock.js.map +1 -0
  495. package/dist/common/logger.d.ts +19 -0
  496. package/dist/common/logger.d.ts.map +1 -0
  497. package/dist/common/logger.js +80 -0
  498. package/dist/common/logger.js.map +1 -0
  499. package/dist/common/metrics-registry.d.ts +48 -0
  500. package/dist/common/metrics-registry.d.ts.map +1 -0
  501. package/dist/common/metrics-registry.js +77 -0
  502. package/dist/common/metrics-registry.js.map +1 -0
  503. package/dist/common/metrics.d.ts +227 -0
  504. package/dist/common/metrics.d.ts.map +1 -0
  505. package/dist/common/metrics.js +524 -0
  506. package/dist/common/metrics.js.map +1 -0
  507. package/dist/common/operation-tracker.d.ts +137 -0
  508. package/dist/common/operation-tracker.d.ts.map +1 -0
  509. package/dist/common/operation-tracker.js +366 -0
  510. package/dist/common/operation-tracker.js.map +1 -0
  511. package/dist/common/provenance/chain.d.ts +54 -0
  512. package/dist/common/provenance/chain.d.ts.map +1 -0
  513. package/dist/common/provenance/chain.js +252 -0
  514. package/dist/common/provenance/chain.js.map +1 -0
  515. package/dist/common/provenance/index.d.ts +14 -0
  516. package/dist/common/provenance/index.d.ts.map +1 -0
  517. package/dist/common/provenance/index.js +19 -0
  518. package/dist/common/provenance/index.js.map +1 -0
  519. package/dist/common/provenance/query.d.ts +111 -0
  520. package/dist/common/provenance/query.d.ts.map +1 -0
  521. package/dist/common/provenance/query.js +310 -0
  522. package/dist/common/provenance/query.js.map +1 -0
  523. package/dist/common/provenance/storage.d.ts +297 -0
  524. package/dist/common/provenance/storage.d.ts.map +1 -0
  525. package/dist/common/provenance/storage.js +436 -0
  526. package/dist/common/provenance/storage.js.map +1 -0
  527. package/dist/common/provenance/tracker.d.ts +57 -0
  528. package/dist/common/provenance/tracker.d.ts.map +1 -0
  529. package/dist/common/provenance/tracker.js +209 -0
  530. package/dist/common/provenance/tracker.js.map +1 -0
  531. package/dist/common/provenance/types.d.ts +146 -0
  532. package/dist/common/provenance/types.d.ts.map +1 -0
  533. package/dist/common/provenance/types.js +10 -0
  534. package/dist/common/provenance/types.js.map +1 -0
  535. package/dist/common/random.d.ts +84 -0
  536. package/dist/common/random.d.ts.map +1 -0
  537. package/dist/common/random.js +130 -0
  538. package/dist/common/random.js.map +1 -0
  539. package/dist/common/redaction.d.ts +49 -0
  540. package/dist/common/redaction.d.ts.map +1 -0
  541. package/dist/common/redaction.js +217 -0
  542. package/dist/common/redaction.js.map +1 -0
  543. package/dist/common/redis-cluster.d.ts +538 -0
  544. package/dist/common/redis-cluster.d.ts.map +1 -0
  545. package/dist/common/redis-cluster.js +1539 -0
  546. package/dist/common/redis-cluster.js.map +1 -0
  547. package/dist/common/redis-resilience.d.ts +270 -0
  548. package/dist/common/redis-resilience.d.ts.map +1 -0
  549. package/dist/common/redis-resilience.js +586 -0
  550. package/dist/common/redis-resilience.js.map +1 -0
  551. package/dist/common/redis.d.ts +19 -0
  552. package/dist/common/redis.d.ts.map +1 -0
  553. package/dist/common/redis.js +73 -0
  554. package/dist/common/redis.js.map +1 -0
  555. package/dist/common/secret-generator.d.ts +142 -0
  556. package/dist/common/secret-generator.d.ts.map +1 -0
  557. package/dist/common/secret-generator.js +286 -0
  558. package/dist/common/secret-generator.js.map +1 -0
  559. package/dist/common/security-mode.d.ts +101 -0
  560. package/dist/common/security-mode.d.ts.map +1 -0
  561. package/dist/common/security-mode.js +304 -0
  562. package/dist/common/security-mode.js.map +1 -0
  563. package/dist/common/telemetry/index.d.ts +82 -0
  564. package/dist/common/telemetry/index.d.ts.map +1 -0
  565. package/dist/common/telemetry/index.js +198 -0
  566. package/dist/common/telemetry/index.js.map +1 -0
  567. package/dist/common/telemetry/instrumentation.d.ts +167 -0
  568. package/dist/common/telemetry/instrumentation.d.ts.map +1 -0
  569. package/dist/common/telemetry/instrumentation.js +492 -0
  570. package/dist/common/telemetry/instrumentation.js.map +1 -0
  571. package/dist/common/telemetry/metrics-bridge.d.ts +227 -0
  572. package/dist/common/telemetry/metrics-bridge.d.ts.map +1 -0
  573. package/dist/common/telemetry/metrics-bridge.js +437 -0
  574. package/dist/common/telemetry/metrics-bridge.js.map +1 -0
  575. package/dist/common/telemetry/middleware.d.ts +114 -0
  576. package/dist/common/telemetry/middleware.d.ts.map +1 -0
  577. package/dist/common/telemetry/middleware.js +353 -0
  578. package/dist/common/telemetry/middleware.js.map +1 -0
  579. package/dist/common/telemetry/propagation.d.ts +221 -0
  580. package/dist/common/telemetry/propagation.d.ts.map +1 -0
  581. package/dist/common/telemetry/propagation.js +409 -0
  582. package/dist/common/telemetry/propagation.js.map +1 -0
  583. package/dist/common/telemetry/spans.d.ts +295 -0
  584. package/dist/common/telemetry/spans.d.ts.map +1 -0
  585. package/dist/common/telemetry/spans.js +439 -0
  586. package/dist/common/telemetry/spans.js.map +1 -0
  587. package/dist/common/telemetry/tracer.d.ts +155 -0
  588. package/dist/common/telemetry/tracer.d.ts.map +1 -0
  589. package/dist/common/telemetry/tracer.js +343 -0
  590. package/dist/common/telemetry/tracer.js.map +1 -0
  591. package/dist/common/telemetry.d.ts +15 -0
  592. package/dist/common/telemetry.d.ts.map +1 -0
  593. package/dist/common/telemetry.js +61 -0
  594. package/dist/common/telemetry.js.map +1 -0
  595. package/dist/common/tenant-verification.d.ts +86 -0
  596. package/dist/common/tenant-verification.d.ts.map +1 -0
  597. package/dist/common/tenant-verification.js +184 -0
  598. package/dist/common/tenant-verification.js.map +1 -0
  599. package/dist/common/timeout.d.ts +40 -0
  600. package/dist/common/timeout.d.ts.map +1 -0
  601. package/dist/common/timeout.js +82 -0
  602. package/dist/common/timeout.js.map +1 -0
  603. package/dist/common/token-revocation.d.ts +44 -0
  604. package/dist/common/token-revocation.d.ts.map +1 -0
  605. package/dist/common/token-revocation.js +169 -0
  606. package/dist/common/token-revocation.js.map +1 -0
  607. package/dist/common/trace.d.ts +149 -0
  608. package/dist/common/trace.d.ts.map +1 -0
  609. package/dist/common/trace.js +328 -0
  610. package/dist/common/trace.js.map +1 -0
  611. package/dist/common/trust-cache.d.ts +263 -0
  612. package/dist/common/trust-cache.d.ts.map +1 -0
  613. package/dist/common/trust-cache.js +670 -0
  614. package/dist/common/trust-cache.js.map +1 -0
  615. package/dist/common/types.d.ts +328 -0
  616. package/dist/common/types.d.ts.map +1 -0
  617. package/dist/common/types.js +55 -0
  618. package/dist/common/types.js.map +1 -0
  619. package/dist/common/validation.d.ts +113 -0
  620. package/dist/common/validation.d.ts.map +1 -0
  621. package/dist/common/validation.js +221 -0
  622. package/dist/common/validation.js.map +1 -0
  623. package/dist/compliance/export/evidence-collector.d.ts +252 -0
  624. package/dist/compliance/export/evidence-collector.d.ts.map +1 -0
  625. package/dist/compliance/export/evidence-collector.js +488 -0
  626. package/dist/compliance/export/evidence-collector.js.map +1 -0
  627. package/dist/compliance/export/hash-verifier.d.ts +181 -0
  628. package/dist/compliance/export/hash-verifier.d.ts.map +1 -0
  629. package/dist/compliance/export/hash-verifier.js +425 -0
  630. package/dist/compliance/export/hash-verifier.js.map +1 -0
  631. package/dist/compliance/export/index.d.ts +14 -0
  632. package/dist/compliance/export/index.d.ts.map +1 -0
  633. package/dist/compliance/export/index.js +41 -0
  634. package/dist/compliance/export/index.js.map +1 -0
  635. package/dist/compliance/export/report-generator.d.ts +264 -0
  636. package/dist/compliance/export/report-generator.d.ts.map +1 -0
  637. package/dist/compliance/export/report-generator.js +890 -0
  638. package/dist/compliance/export/report-generator.js.map +1 -0
  639. package/dist/compliance/export/scheduled-exports.d.ts +256 -0
  640. package/dist/compliance/export/scheduled-exports.d.ts.map +1 -0
  641. package/dist/compliance/export/scheduled-exports.js +545 -0
  642. package/dist/compliance/export/scheduled-exports.js.map +1 -0
  643. package/dist/compliance/export/service.d.ts +191 -0
  644. package/dist/compliance/export/service.d.ts.map +1 -0
  645. package/dist/compliance/export/service.js +382 -0
  646. package/dist/compliance/export/service.js.map +1 -0
  647. package/dist/compliance/fedramp/assessment.d.ts +654 -0
  648. package/dist/compliance/fedramp/assessment.d.ts.map +1 -0
  649. package/dist/compliance/fedramp/assessment.js +721 -0
  650. package/dist/compliance/fedramp/assessment.js.map +1 -0
  651. package/dist/compliance/fedramp/boundary.d.ts +932 -0
  652. package/dist/compliance/fedramp/boundary.d.ts.map +1 -0
  653. package/dist/compliance/fedramp/boundary.js +645 -0
  654. package/dist/compliance/fedramp/boundary.js.map +1 -0
  655. package/dist/compliance/fedramp/continuous-monitoring.d.ts +705 -0
  656. package/dist/compliance/fedramp/continuous-monitoring.d.ts.map +1 -0
  657. package/dist/compliance/fedramp/continuous-monitoring.js +616 -0
  658. package/dist/compliance/fedramp/continuous-monitoring.js.map +1 -0
  659. package/dist/compliance/fedramp/controls.d.ts +128 -0
  660. package/dist/compliance/fedramp/controls.d.ts.map +1 -0
  661. package/dist/compliance/fedramp/controls.js +1110 -0
  662. package/dist/compliance/fedramp/controls.js.map +1 -0
  663. package/dist/compliance/fedramp/incident-reporting.d.ts +1001 -0
  664. package/dist/compliance/fedramp/incident-reporting.d.ts.map +1 -0
  665. package/dist/compliance/fedramp/incident-reporting.js +764 -0
  666. package/dist/compliance/fedramp/incident-reporting.js.map +1 -0
  667. package/dist/compliance/fedramp/index.d.ts +87 -0
  668. package/dist/compliance/fedramp/index.d.ts.map +1 -0
  669. package/dist/compliance/fedramp/index.js +192 -0
  670. package/dist/compliance/fedramp/index.js.map +1 -0
  671. package/dist/compliance/fedramp/metrics.d.ts +288 -0
  672. package/dist/compliance/fedramp/metrics.d.ts.map +1 -0
  673. package/dist/compliance/fedramp/metrics.js +560 -0
  674. package/dist/compliance/fedramp/metrics.js.map +1 -0
  675. package/dist/compliance/fedramp/poam.d.ts +635 -0
  676. package/dist/compliance/fedramp/poam.d.ts.map +1 -0
  677. package/dist/compliance/fedramp/poam.js +602 -0
  678. package/dist/compliance/fedramp/poam.js.map +1 -0
  679. package/dist/compliance/fedramp/ssp-generator.d.ts +368 -0
  680. package/dist/compliance/fedramp/ssp-generator.d.ts.map +1 -0
  681. package/dist/compliance/fedramp/ssp-generator.js +543 -0
  682. package/dist/compliance/fedramp/ssp-generator.js.map +1 -0
  683. package/dist/compliance/frameworks/nist-800-53.d.ts +35 -0
  684. package/dist/compliance/frameworks/nist-800-53.d.ts.map +1 -0
  685. package/dist/compliance/frameworks/nist-800-53.js +892 -0
  686. package/dist/compliance/frameworks/nist-800-53.js.map +1 -0
  687. package/dist/compliance/frameworks/pci-dss.d.ts +407 -0
  688. package/dist/compliance/frameworks/pci-dss.d.ts.map +1 -0
  689. package/dist/compliance/frameworks/pci-dss.js +1873 -0
  690. package/dist/compliance/frameworks/pci-dss.js.map +1 -0
  691. package/dist/compliance/frameworks/soc2.d.ts +42 -0
  692. package/dist/compliance/frameworks/soc2.d.ts.map +1 -0
  693. package/dist/compliance/frameworks/soc2.js +669 -0
  694. package/dist/compliance/frameworks/soc2.js.map +1 -0
  695. package/dist/compliance/gdpr/data-transfers.d.ts +493 -0
  696. package/dist/compliance/gdpr/data-transfers.d.ts.map +1 -0
  697. package/dist/compliance/gdpr/data-transfers.js +1242 -0
  698. package/dist/compliance/gdpr/data-transfers.js.map +1 -0
  699. package/dist/compliance/gdpr/index.d.ts +7 -0
  700. package/dist/compliance/gdpr/index.d.ts.map +1 -0
  701. package/dist/compliance/gdpr/index.js +7 -0
  702. package/dist/compliance/gdpr/index.js.map +1 -0
  703. package/dist/compliance/index.d.ts +148 -0
  704. package/dist/compliance/index.d.ts.map +1 -0
  705. package/dist/compliance/index.js +532 -0
  706. package/dist/compliance/index.js.map +1 -0
  707. package/dist/compliance/reports.d.ts +141 -0
  708. package/dist/compliance/reports.d.ts.map +1 -0
  709. package/dist/compliance/reports.js +495 -0
  710. package/dist/compliance/reports.js.map +1 -0
  711. package/dist/compliance/retention/index.d.ts +19 -0
  712. package/dist/compliance/retention/index.d.ts.map +1 -0
  713. package/dist/compliance/retention/index.js +46 -0
  714. package/dist/compliance/retention/index.js.map +1 -0
  715. package/dist/compliance/retention/retention-enforcer.d.ts +128 -0
  716. package/dist/compliance/retention/retention-enforcer.d.ts.map +1 -0
  717. package/dist/compliance/retention/retention-enforcer.js +695 -0
  718. package/dist/compliance/retention/retention-enforcer.js.map +1 -0
  719. package/dist/compliance/retention/retention-policy.d.ts +307 -0
  720. package/dist/compliance/retention/retention-policy.d.ts.map +1 -0
  721. package/dist/compliance/retention/retention-policy.js +102 -0
  722. package/dist/compliance/retention/retention-policy.js.map +1 -0
  723. package/dist/compliance/retention/retention-scheduler.d.ts +124 -0
  724. package/dist/compliance/retention/retention-scheduler.d.ts.map +1 -0
  725. package/dist/compliance/retention/retention-scheduler.js +391 -0
  726. package/dist/compliance/retention/retention-scheduler.js.map +1 -0
  727. package/dist/compliance/types.d.ts +1162 -0
  728. package/dist/compliance/types.d.ts.map +1 -0
  729. package/dist/compliance/types.js +191 -0
  730. package/dist/compliance/types.js.map +1 -0
  731. package/dist/db/migration-checker.d.ts +183 -0
  732. package/dist/db/migration-checker.d.ts.map +1 -0
  733. package/dist/db/migration-checker.js +680 -0
  734. package/dist/db/migration-checker.js.map +1 -0
  735. package/dist/db/schema/api-keys.d.ts +506 -0
  736. package/dist/db/schema/api-keys.d.ts.map +1 -0
  737. package/dist/db/schema/api-keys.js +98 -0
  738. package/dist/db/schema/api-keys.js.map +1 -0
  739. package/dist/db/schema/escalations.d.ts +554 -0
  740. package/dist/db/schema/escalations.d.ts.map +1 -0
  741. package/dist/db/schema/escalations.js +97 -0
  742. package/dist/db/schema/escalations.js.map +1 -0
  743. package/dist/db/schema/index.d.ts +19 -0
  744. package/dist/db/schema/index.d.ts.map +1 -0
  745. package/dist/db/schema/index.js +19 -0
  746. package/dist/db/schema/index.js.map +1 -0
  747. package/dist/db/schema/intents.d.ts +535 -0
  748. package/dist/db/schema/intents.d.ts.map +1 -0
  749. package/dist/db/schema/intents.js +90 -0
  750. package/dist/db/schema/intents.js.map +1 -0
  751. package/dist/db/schema/merkle.d.ts +475 -0
  752. package/dist/db/schema/merkle.d.ts.map +1 -0
  753. package/dist/db/schema/merkle.js +100 -0
  754. package/dist/db/schema/merkle.js.map +1 -0
  755. package/dist/db/schema/operations.d.ts +256 -0
  756. package/dist/db/schema/operations.d.ts.map +1 -0
  757. package/dist/db/schema/operations.js +65 -0
  758. package/dist/db/schema/operations.js.map +1 -0
  759. package/dist/db/schema/policy-versions.d.ts +149 -0
  760. package/dist/db/schema/policy-versions.d.ts.map +1 -0
  761. package/dist/db/schema/policy-versions.js +40 -0
  762. package/dist/db/schema/policy-versions.js.map +1 -0
  763. package/dist/db/schema/proofs.d.ts +412 -0
  764. package/dist/db/schema/proofs.d.ts.map +1 -0
  765. package/dist/db/schema/proofs.js +63 -0
  766. package/dist/db/schema/proofs.js.map +1 -0
  767. package/dist/db/schema/service-accounts.d.ts +783 -0
  768. package/dist/db/schema/service-accounts.d.ts.map +1 -0
  769. package/dist/db/schema/service-accounts.js +176 -0
  770. package/dist/db/schema/service-accounts.js.map +1 -0
  771. package/dist/db/schema/trust.d.ts +593 -0
  772. package/dist/db/schema/trust.d.ts.map +1 -0
  773. package/dist/db/schema/trust.js +98 -0
  774. package/dist/db/schema/trust.js.map +1 -0
  775. package/dist/db/schema/users.d.ts +487 -0
  776. package/dist/db/schema/users.d.ts.map +1 -0
  777. package/dist/db/schema/users.js +133 -0
  778. package/dist/db/schema/users.js.map +1 -0
  779. package/dist/db/schema/webhooks.d.ts +382 -0
  780. package/dist/db/schema/webhooks.d.ts.map +1 -0
  781. package/dist/db/schema/webhooks.js +91 -0
  782. package/dist/db/schema/webhooks.js.map +1 -0
  783. package/dist/enforce/constraint-evaluator.d.ts +385 -0
  784. package/dist/enforce/constraint-evaluator.d.ts.map +1 -0
  785. package/dist/enforce/constraint-evaluator.js +648 -0
  786. package/dist/enforce/constraint-evaluator.js.map +1 -0
  787. package/dist/enforce/decision-aggregator.d.ts +269 -0
  788. package/dist/enforce/decision-aggregator.d.ts.map +1 -0
  789. package/dist/enforce/decision-aggregator.js +560 -0
  790. package/dist/enforce/decision-aggregator.js.map +1 -0
  791. package/dist/enforce/escalation-rules.d.ts +411 -0
  792. package/dist/enforce/escalation-rules.d.ts.map +1 -0
  793. package/dist/enforce/escalation-rules.js +681 -0
  794. package/dist/enforce/escalation-rules.js.map +1 -0
  795. package/dist/enforce/index.d.ts +175 -0
  796. package/dist/enforce/index.d.ts.map +1 -0
  797. package/dist/enforce/index.js +402 -0
  798. package/dist/enforce/index.js.map +1 -0
  799. package/dist/enforce/policy-engine.d.ts +390 -0
  800. package/dist/enforce/policy-engine.d.ts.map +1 -0
  801. package/dist/enforce/policy-engine.js +652 -0
  802. package/dist/enforce/policy-engine.js.map +1 -0
  803. package/dist/enforce/runtime-config.d.ts +387 -0
  804. package/dist/enforce/runtime-config.d.ts.map +1 -0
  805. package/dist/enforce/runtime-config.js +709 -0
  806. package/dist/enforce/runtime-config.js.map +1 -0
  807. package/dist/index.d.ts +63 -0
  808. package/dist/index.d.ts.map +1 -0
  809. package/dist/index.js +74 -0
  810. package/dist/index.js.map +1 -0
  811. package/dist/intent/audit.d.ts +119 -0
  812. package/dist/intent/audit.d.ts.map +1 -0
  813. package/dist/intent/audit.js +457 -0
  814. package/dist/intent/audit.js.map +1 -0
  815. package/dist/intent/classifier/index.d.ts +121 -0
  816. package/dist/intent/classifier/index.d.ts.map +1 -0
  817. package/dist/intent/classifier/index.js +232 -0
  818. package/dist/intent/classifier/index.js.map +1 -0
  819. package/dist/intent/classifier/patterns.d.ts +129 -0
  820. package/dist/intent/classifier/patterns.d.ts.map +1 -0
  821. package/dist/intent/classifier/patterns.js +471 -0
  822. package/dist/intent/classifier/patterns.js.map +1 -0
  823. package/dist/intent/classifier/risk.d.ts +177 -0
  824. package/dist/intent/classifier/risk.d.ts.map +1 -0
  825. package/dist/intent/classifier/risk.js +335 -0
  826. package/dist/intent/classifier/risk.js.map +1 -0
  827. package/dist/intent/cleanup.d.ts +24 -0
  828. package/dist/intent/cleanup.d.ts.map +1 -0
  829. package/dist/intent/cleanup.js +104 -0
  830. package/dist/intent/cleanup.js.map +1 -0
  831. package/dist/intent/consent.d.ts +238 -0
  832. package/dist/intent/consent.d.ts.map +1 -0
  833. package/dist/intent/consent.js +427 -0
  834. package/dist/intent/consent.js.map +1 -0
  835. package/dist/intent/escalation.d.ts +208 -0
  836. package/dist/intent/escalation.d.ts.map +1 -0
  837. package/dist/intent/escalation.js +550 -0
  838. package/dist/intent/escalation.js.map +1 -0
  839. package/dist/intent/gdpr.d.ts +245 -0
  840. package/dist/intent/gdpr.d.ts.map +1 -0
  841. package/dist/intent/gdpr.js +580 -0
  842. package/dist/intent/gdpr.js.map +1 -0
  843. package/dist/intent/health.d.ts +214 -0
  844. package/dist/intent/health.d.ts.map +1 -0
  845. package/dist/intent/health.js +526 -0
  846. package/dist/intent/health.js.map +1 -0
  847. package/dist/intent/index.d.ts +447 -0
  848. package/dist/intent/index.d.ts.map +1 -0
  849. package/dist/intent/index.js +685 -0
  850. package/dist/intent/index.js.map +1 -0
  851. package/dist/intent/metrics.d.ts +391 -0
  852. package/dist/intent/metrics.d.ts.map +1 -0
  853. package/dist/intent/metrics.js +885 -0
  854. package/dist/intent/metrics.js.map +1 -0
  855. package/dist/intent/openapi.d.ts +22 -0
  856. package/dist/intent/openapi.d.ts.map +1 -0
  857. package/dist/intent/openapi.js +1674 -0
  858. package/dist/intent/openapi.js.map +1 -0
  859. package/dist/intent/planner/dependency.d.ts +78 -0
  860. package/dist/intent/planner/dependency.d.ts.map +1 -0
  861. package/dist/intent/planner/dependency.js +334 -0
  862. package/dist/intent/planner/dependency.js.map +1 -0
  863. package/dist/intent/planner/index.d.ts +157 -0
  864. package/dist/intent/planner/index.d.ts.map +1 -0
  865. package/dist/intent/planner/index.js +372 -0
  866. package/dist/intent/planner/index.js.map +1 -0
  867. package/dist/intent/planner/rollback.d.ts +92 -0
  868. package/dist/intent/planner/rollback.d.ts.map +1 -0
  869. package/dist/intent/planner/rollback.js +326 -0
  870. package/dist/intent/planner/rollback.js.map +1 -0
  871. package/dist/intent/planner/templates.d.ts +81 -0
  872. package/dist/intent/planner/templates.d.ts.map +1 -0
  873. package/dist/intent/planner/templates.js +560 -0
  874. package/dist/intent/planner/templates.js.map +1 -0
  875. package/dist/intent/queue.d.ts +150 -0
  876. package/dist/intent/queue.d.ts.map +1 -0
  877. package/dist/intent/queue.js +339 -0
  878. package/dist/intent/queue.js.map +1 -0
  879. package/dist/intent/queues.d.ts +176 -0
  880. package/dist/intent/queues.d.ts.map +1 -0
  881. package/dist/intent/queues.js +1382 -0
  882. package/dist/intent/queues.js.map +1 -0
  883. package/dist/intent/ratelimit.d.ts +147 -0
  884. package/dist/intent/ratelimit.d.ts.map +1 -0
  885. package/dist/intent/ratelimit.js +301 -0
  886. package/dist/intent/ratelimit.js.map +1 -0
  887. package/dist/intent/replay/comparator.d.ts +148 -0
  888. package/dist/intent/replay/comparator.d.ts.map +1 -0
  889. package/dist/intent/replay/comparator.js +320 -0
  890. package/dist/intent/replay/comparator.js.map +1 -0
  891. package/dist/intent/replay/index.d.ts +159 -0
  892. package/dist/intent/replay/index.d.ts.map +1 -0
  893. package/dist/intent/replay/index.js +486 -0
  894. package/dist/intent/replay/index.js.map +1 -0
  895. package/dist/intent/replay/simulator.d.ts +184 -0
  896. package/dist/intent/replay/simulator.d.ts.map +1 -0
  897. package/dist/intent/replay/simulator.js +510 -0
  898. package/dist/intent/replay/simulator.js.map +1 -0
  899. package/dist/intent/replay/snapshot.d.ts +149 -0
  900. package/dist/intent/replay/snapshot.d.ts.map +1 -0
  901. package/dist/intent/replay/snapshot.js +245 -0
  902. package/dist/intent/replay/snapshot.js.map +1 -0
  903. package/dist/intent/repository.d.ts +198 -0
  904. package/dist/intent/repository.d.ts.map +1 -0
  905. package/dist/intent/repository.js +526 -0
  906. package/dist/intent/repository.js.map +1 -0
  907. package/dist/intent/response-middleware.d.ts +156 -0
  908. package/dist/intent/response-middleware.d.ts.map +1 -0
  909. package/dist/intent/response-middleware.js +337 -0
  910. package/dist/intent/response-middleware.js.map +1 -0
  911. package/dist/intent/response.d.ts +267 -0
  912. package/dist/intent/response.d.ts.map +1 -0
  913. package/dist/intent/response.js +402 -0
  914. package/dist/intent/response.js.map +1 -0
  915. package/dist/intent/routes.d.ts +35 -0
  916. package/dist/intent/routes.d.ts.map +1 -0
  917. package/dist/intent/routes.js +801 -0
  918. package/dist/intent/routes.js.map +1 -0
  919. package/dist/intent/scheduler.d.ts +45 -0
  920. package/dist/intent/scheduler.d.ts.map +1 -0
  921. package/dist/intent/scheduler.js +221 -0
  922. package/dist/intent/scheduler.js.map +1 -0
  923. package/dist/intent/schema.d.ts +2997 -0
  924. package/dist/intent/schema.d.ts.map +1 -0
  925. package/dist/intent/schema.js +447 -0
  926. package/dist/intent/schema.js.map +1 -0
  927. package/dist/intent/shutdown.d.ts +145 -0
  928. package/dist/intent/shutdown.d.ts.map +1 -0
  929. package/dist/intent/shutdown.js +468 -0
  930. package/dist/intent/shutdown.js.map +1 -0
  931. package/dist/intent/state-machine.d.ts +111 -0
  932. package/dist/intent/state-machine.d.ts.map +1 -0
  933. package/dist/intent/state-machine.js +242 -0
  934. package/dist/intent/state-machine.js.map +1 -0
  935. package/dist/intent/tracing.d.ts +152 -0
  936. package/dist/intent/tracing.d.ts.map +1 -0
  937. package/dist/intent/tracing.js +658 -0
  938. package/dist/intent/tracing.js.map +1 -0
  939. package/dist/intent/types.d.ts +175 -0
  940. package/dist/intent/types.d.ts.map +1 -0
  941. package/dist/intent/types.js +25 -0
  942. package/dist/intent/types.js.map +1 -0
  943. package/dist/intent/webhooks/delivery-repository.d.ts +80 -0
  944. package/dist/intent/webhooks/delivery-repository.d.ts.map +1 -0
  945. package/dist/intent/webhooks/delivery-repository.js +251 -0
  946. package/dist/intent/webhooks/delivery-repository.js.map +1 -0
  947. package/dist/intent/webhooks/dns-pinning.d.ts +30 -0
  948. package/dist/intent/webhooks/dns-pinning.d.ts.map +1 -0
  949. package/dist/intent/webhooks/dns-pinning.js +69 -0
  950. package/dist/intent/webhooks/dns-pinning.js.map +1 -0
  951. package/dist/intent/webhooks/index.d.ts +14 -0
  952. package/dist/intent/webhooks/index.d.ts.map +1 -0
  953. package/dist/intent/webhooks/index.js +17 -0
  954. package/dist/intent/webhooks/index.js.map +1 -0
  955. package/dist/intent/webhooks/signature.d.ts +47 -0
  956. package/dist/intent/webhooks/signature.d.ts.map +1 -0
  957. package/dist/intent/webhooks/signature.js +80 -0
  958. package/dist/intent/webhooks/signature.js.map +1 -0
  959. package/dist/intent/webhooks/ssrf-protection.d.ts +29 -0
  960. package/dist/intent/webhooks/ssrf-protection.d.ts.map +1 -0
  961. package/dist/intent/webhooks/ssrf-protection.js +161 -0
  962. package/dist/intent/webhooks/ssrf-protection.js.map +1 -0
  963. package/dist/intent/webhooks/types.d.ts +132 -0
  964. package/dist/intent/webhooks/types.d.ts.map +1 -0
  965. package/dist/intent/webhooks/types.js +14 -0
  966. package/dist/intent/webhooks/types.js.map +1 -0
  967. package/dist/intent/webhooks.d.ts +610 -0
  968. package/dist/intent/webhooks.d.ts.map +1 -0
  969. package/dist/intent/webhooks.js +1793 -0
  970. package/dist/intent/webhooks.js.map +1 -0
  971. package/dist/policy/diff.d.ts +88 -0
  972. package/dist/policy/diff.d.ts.map +1 -0
  973. package/dist/policy/diff.js +325 -0
  974. package/dist/policy/diff.js.map +1 -0
  975. package/dist/policy/evaluator.d.ts +102 -0
  976. package/dist/policy/evaluator.d.ts.map +1 -0
  977. package/dist/policy/evaluator.js +647 -0
  978. package/dist/policy/evaluator.js.map +1 -0
  979. package/dist/policy/index.d.ts +16 -0
  980. package/dist/policy/index.d.ts.map +1 -0
  981. package/dist/policy/index.js +19 -0
  982. package/dist/policy/index.js.map +1 -0
  983. package/dist/policy/loader.d.ts +63 -0
  984. package/dist/policy/loader.d.ts.map +1 -0
  985. package/dist/policy/loader.js +173 -0
  986. package/dist/policy/loader.js.map +1 -0
  987. package/dist/policy/service.d.ts +150 -0
  988. package/dist/policy/service.d.ts.map +1 -0
  989. package/dist/policy/service.js +782 -0
  990. package/dist/policy/service.js.map +1 -0
  991. package/dist/policy/types.d.ts +220 -0
  992. package/dist/policy/types.d.ts.map +1 -0
  993. package/dist/policy/types.js +36 -0
  994. package/dist/policy/types.js.map +1 -0
  995. package/dist/proof/hybrid-signing.d.ts +82 -0
  996. package/dist/proof/hybrid-signing.d.ts.map +1 -0
  997. package/dist/proof/hybrid-signing.js +239 -0
  998. package/dist/proof/hybrid-signing.js.map +1 -0
  999. package/dist/proof/index.d.ts +203 -0
  1000. package/dist/proof/index.d.ts.map +1 -0
  1001. package/dist/proof/index.js +610 -0
  1002. package/dist/proof/index.js.map +1 -0
  1003. package/dist/proof/merkle-service.d.ts +194 -0
  1004. package/dist/proof/merkle-service.d.ts.map +1 -0
  1005. package/dist/proof/merkle-service.js +463 -0
  1006. package/dist/proof/merkle-service.js.map +1 -0
  1007. package/dist/proof/merkle.d.ts +118 -0
  1008. package/dist/proof/merkle.d.ts.map +1 -0
  1009. package/dist/proof/merkle.js +265 -0
  1010. package/dist/proof/merkle.js.map +1 -0
  1011. package/dist/security/ai-governance/access-policy.d.ts +197 -0
  1012. package/dist/security/ai-governance/access-policy.d.ts.map +1 -0
  1013. package/dist/security/ai-governance/access-policy.js +522 -0
  1014. package/dist/security/ai-governance/access-policy.js.map +1 -0
  1015. package/dist/security/ai-governance/audit-trail.d.ts +241 -0
  1016. package/dist/security/ai-governance/audit-trail.d.ts.map +1 -0
  1017. package/dist/security/ai-governance/audit-trail.js +645 -0
  1018. package/dist/security/ai-governance/audit-trail.js.map +1 -0
  1019. package/dist/security/ai-governance/bias-detection.d.ts +221 -0
  1020. package/dist/security/ai-governance/bias-detection.d.ts.map +1 -0
  1021. package/dist/security/ai-governance/bias-detection.js +615 -0
  1022. package/dist/security/ai-governance/bias-detection.js.map +1 -0
  1023. package/dist/security/ai-governance/index.d.ts +92 -0
  1024. package/dist/security/ai-governance/index.d.ts.map +1 -0
  1025. package/dist/security/ai-governance/index.js +184 -0
  1026. package/dist/security/ai-governance/index.js.map +1 -0
  1027. package/dist/security/ai-governance/middleware.d.ts +110 -0
  1028. package/dist/security/ai-governance/middleware.d.ts.map +1 -0
  1029. package/dist/security/ai-governance/middleware.js +359 -0
  1030. package/dist/security/ai-governance/middleware.js.map +1 -0
  1031. package/dist/security/ai-governance/model-registry.d.ts +229 -0
  1032. package/dist/security/ai-governance/model-registry.d.ts.map +1 -0
  1033. package/dist/security/ai-governance/model-registry.js +535 -0
  1034. package/dist/security/ai-governance/model-registry.js.map +1 -0
  1035. package/dist/security/ai-governance/output-filter.d.ts +150 -0
  1036. package/dist/security/ai-governance/output-filter.d.ts.map +1 -0
  1037. package/dist/security/ai-governance/output-filter.js +561 -0
  1038. package/dist/security/ai-governance/output-filter.js.map +1 -0
  1039. package/dist/security/ai-governance/prompt-injection.d.ts +153 -0
  1040. package/dist/security/ai-governance/prompt-injection.d.ts.map +1 -0
  1041. package/dist/security/ai-governance/prompt-injection.js +614 -0
  1042. package/dist/security/ai-governance/prompt-injection.js.map +1 -0
  1043. package/dist/security/ai-governance/rate-limiter.d.ts +156 -0
  1044. package/dist/security/ai-governance/rate-limiter.d.ts.map +1 -0
  1045. package/dist/security/ai-governance/rate-limiter.js +541 -0
  1046. package/dist/security/ai-governance/rate-limiter.js.map +1 -0
  1047. package/dist/security/ai-governance/types.d.ts +594 -0
  1048. package/dist/security/ai-governance/types.d.ts.map +1 -0
  1049. package/dist/security/ai-governance/types.js +6 -0
  1050. package/dist/security/ai-governance/types.js.map +1 -0
  1051. package/dist/security/alerting/channels/base.d.ts +91 -0
  1052. package/dist/security/alerting/channels/base.d.ts.map +1 -0
  1053. package/dist/security/alerting/channels/base.js +128 -0
  1054. package/dist/security/alerting/channels/base.js.map +1 -0
  1055. package/dist/security/alerting/channels/email.d.ts +92 -0
  1056. package/dist/security/alerting/channels/email.d.ts.map +1 -0
  1057. package/dist/security/alerting/channels/email.js +418 -0
  1058. package/dist/security/alerting/channels/email.js.map +1 -0
  1059. package/dist/security/alerting/channels/http-base.d.ts +86 -0
  1060. package/dist/security/alerting/channels/http-base.d.ts.map +1 -0
  1061. package/dist/security/alerting/channels/http-base.js +133 -0
  1062. package/dist/security/alerting/channels/http-base.js.map +1 -0
  1063. package/dist/security/alerting/channels/index.d.ts +30 -0
  1064. package/dist/security/alerting/channels/index.d.ts.map +1 -0
  1065. package/dist/security/alerting/channels/index.js +22 -0
  1066. package/dist/security/alerting/channels/index.js.map +1 -0
  1067. package/dist/security/alerting/channels/pagerduty.d.ts +70 -0
  1068. package/dist/security/alerting/channels/pagerduty.d.ts.map +1 -0
  1069. package/dist/security/alerting/channels/pagerduty.js +248 -0
  1070. package/dist/security/alerting/channels/pagerduty.js.map +1 -0
  1071. package/dist/security/alerting/channels/slack.d.ts +55 -0
  1072. package/dist/security/alerting/channels/slack.d.ts.map +1 -0
  1073. package/dist/security/alerting/channels/slack.js +215 -0
  1074. package/dist/security/alerting/channels/slack.js.map +1 -0
  1075. package/dist/security/alerting/channels/sns.d.ts +87 -0
  1076. package/dist/security/alerting/channels/sns.d.ts.map +1 -0
  1077. package/dist/security/alerting/channels/sns.js +251 -0
  1078. package/dist/security/alerting/channels/sns.js.map +1 -0
  1079. package/dist/security/alerting/channels/webhook.d.ts +92 -0
  1080. package/dist/security/alerting/channels/webhook.d.ts.map +1 -0
  1081. package/dist/security/alerting/channels/webhook.js +203 -0
  1082. package/dist/security/alerting/channels/webhook.js.map +1 -0
  1083. package/dist/security/alerting/detector.d.ts +217 -0
  1084. package/dist/security/alerting/detector.d.ts.map +1 -0
  1085. package/dist/security/alerting/detector.js +725 -0
  1086. package/dist/security/alerting/detector.js.map +1 -0
  1087. package/dist/security/alerting/index.d.ts +57 -0
  1088. package/dist/security/alerting/index.d.ts.map +1 -0
  1089. package/dist/security/alerting/index.js +214 -0
  1090. package/dist/security/alerting/index.js.map +1 -0
  1091. package/dist/security/alerting/service.d.ts +190 -0
  1092. package/dist/security/alerting/service.d.ts.map +1 -0
  1093. package/dist/security/alerting/service.js +815 -0
  1094. package/dist/security/alerting/service.js.map +1 -0
  1095. package/dist/security/alerting/types.d.ts +2165 -0
  1096. package/dist/security/alerting/types.d.ts.map +1 -0
  1097. package/dist/security/alerting/types.js +278 -0
  1098. package/dist/security/alerting/types.js.map +1 -0
  1099. package/dist/security/anomaly/detectors/account-compromise.d.ts +198 -0
  1100. package/dist/security/anomaly/detectors/account-compromise.d.ts.map +1 -0
  1101. package/dist/security/anomaly/detectors/account-compromise.js +815 -0
  1102. package/dist/security/anomaly/detectors/account-compromise.js.map +1 -0
  1103. package/dist/security/anomaly/detectors/data-exfiltration.d.ts +175 -0
  1104. package/dist/security/anomaly/detectors/data-exfiltration.d.ts.map +1 -0
  1105. package/dist/security/anomaly/detectors/data-exfiltration.js +733 -0
  1106. package/dist/security/anomaly/detectors/data-exfiltration.js.map +1 -0
  1107. package/dist/security/anomaly/detectors/geographic.d.ts +100 -0
  1108. package/dist/security/anomaly/detectors/geographic.d.ts.map +1 -0
  1109. package/dist/security/anomaly/detectors/geographic.js +348 -0
  1110. package/dist/security/anomaly/detectors/geographic.js.map +1 -0
  1111. package/dist/security/anomaly/detectors/index.d.ts +86 -0
  1112. package/dist/security/anomaly/detectors/index.d.ts.map +1 -0
  1113. package/dist/security/anomaly/detectors/index.js +118 -0
  1114. package/dist/security/anomaly/detectors/index.js.map +1 -0
  1115. package/dist/security/anomaly/detectors/lateral-movement.d.ts +168 -0
  1116. package/dist/security/anomaly/detectors/lateral-movement.d.ts.map +1 -0
  1117. package/dist/security/anomaly/detectors/lateral-movement.js +795 -0
  1118. package/dist/security/anomaly/detectors/lateral-movement.js.map +1 -0
  1119. package/dist/security/anomaly/detectors/privilege-escalation.d.ts +177 -0
  1120. package/dist/security/anomaly/detectors/privilege-escalation.d.ts.map +1 -0
  1121. package/dist/security/anomaly/detectors/privilege-escalation.js +741 -0
  1122. package/dist/security/anomaly/detectors/privilege-escalation.js.map +1 -0
  1123. package/dist/security/anomaly/detectors/temporal.d.ts +71 -0
  1124. package/dist/security/anomaly/detectors/temporal.d.ts.map +1 -0
  1125. package/dist/security/anomaly/detectors/temporal.js +398 -0
  1126. package/dist/security/anomaly/detectors/temporal.js.map +1 -0
  1127. package/dist/security/anomaly/detectors/volume.d.ts +97 -0
  1128. package/dist/security/anomaly/detectors/volume.d.ts.map +1 -0
  1129. package/dist/security/anomaly/detectors/volume.js +424 -0
  1130. package/dist/security/anomaly/detectors/volume.js.map +1 -0
  1131. package/dist/security/anomaly/index.d.ts +128 -0
  1132. package/dist/security/anomaly/index.d.ts.map +1 -0
  1133. package/dist/security/anomaly/index.js +378 -0
  1134. package/dist/security/anomaly/index.js.map +1 -0
  1135. package/dist/security/anomaly/types.d.ts +1209 -0
  1136. package/dist/security/anomaly/types.d.ts.map +1 -0
  1137. package/dist/security/anomaly/types.js +193 -0
  1138. package/dist/security/anomaly/types.js.map +1 -0
  1139. package/dist/security/api-keys/cache.d.ts +255 -0
  1140. package/dist/security/api-keys/cache.d.ts.map +1 -0
  1141. package/dist/security/api-keys/cache.js +595 -0
  1142. package/dist/security/api-keys/cache.js.map +1 -0
  1143. package/dist/security/api-keys/db-store.d.ts +150 -0
  1144. package/dist/security/api-keys/db-store.d.ts.map +1 -0
  1145. package/dist/security/api-keys/db-store.js +694 -0
  1146. package/dist/security/api-keys/db-store.js.map +1 -0
  1147. package/dist/security/api-keys/index.d.ts +29 -0
  1148. package/dist/security/api-keys/index.d.ts.map +1 -0
  1149. package/dist/security/api-keys/index.js +81 -0
  1150. package/dist/security/api-keys/index.js.map +1 -0
  1151. package/dist/security/api-keys/middleware.d.ts +164 -0
  1152. package/dist/security/api-keys/middleware.d.ts.map +1 -0
  1153. package/dist/security/api-keys/middleware.js +392 -0
  1154. package/dist/security/api-keys/middleware.js.map +1 -0
  1155. package/dist/security/api-keys/service.d.ts +226 -0
  1156. package/dist/security/api-keys/service.d.ts.map +1 -0
  1157. package/dist/security/api-keys/service.js +861 -0
  1158. package/dist/security/api-keys/service.js.map +1 -0
  1159. package/dist/security/api-keys/store.d.ts +241 -0
  1160. package/dist/security/api-keys/store.d.ts.map +1 -0
  1161. package/dist/security/api-keys/store.js +360 -0
  1162. package/dist/security/api-keys/store.js.map +1 -0
  1163. package/dist/security/api-keys/types.d.ts +718 -0
  1164. package/dist/security/api-keys/types.d.ts.map +1 -0
  1165. package/dist/security/api-keys/types.js +162 -0
  1166. package/dist/security/api-keys/types.js.map +1 -0
  1167. package/dist/security/brute-force.d.ts +390 -0
  1168. package/dist/security/brute-force.d.ts.map +1 -0
  1169. package/dist/security/brute-force.js +677 -0
  1170. package/dist/security/brute-force.js.map +1 -0
  1171. package/dist/security/config-validator.d.ts +152 -0
  1172. package/dist/security/config-validator.d.ts.map +1 -0
  1173. package/dist/security/config-validator.js +667 -0
  1174. package/dist/security/config-validator.js.map +1 -0
  1175. package/dist/security/crypto/fips-mode.d.ts +772 -0
  1176. package/dist/security/crypto/fips-mode.d.ts.map +1 -0
  1177. package/dist/security/crypto/fips-mode.js +1363 -0
  1178. package/dist/security/crypto/fips-mode.js.map +1 -0
  1179. package/dist/security/crypto/index.d.ts +202 -0
  1180. package/dist/security/crypto/index.d.ts.map +1 -0
  1181. package/dist/security/crypto/index.js +292 -0
  1182. package/dist/security/crypto/index.js.map +1 -0
  1183. package/dist/security/crypto/post-quantum/benchmark.d.ts +125 -0
  1184. package/dist/security/crypto/post-quantum/benchmark.d.ts.map +1 -0
  1185. package/dist/security/crypto/post-quantum/benchmark.js +530 -0
  1186. package/dist/security/crypto/post-quantum/benchmark.js.map +1 -0
  1187. package/dist/security/crypto/post-quantum/dilithium.d.ts +144 -0
  1188. package/dist/security/crypto/post-quantum/dilithium.d.ts.map +1 -0
  1189. package/dist/security/crypto/post-quantum/dilithium.js +675 -0
  1190. package/dist/security/crypto/post-quantum/dilithium.js.map +1 -0
  1191. package/dist/security/crypto/post-quantum/hybrid.d.ts +267 -0
  1192. package/dist/security/crypto/post-quantum/hybrid.d.ts.map +1 -0
  1193. package/dist/security/crypto/post-quantum/hybrid.js +457 -0
  1194. package/dist/security/crypto/post-quantum/hybrid.js.map +1 -0
  1195. package/dist/security/crypto/post-quantum/index.d.ts +166 -0
  1196. package/dist/security/crypto/post-quantum/index.d.ts.map +1 -0
  1197. package/dist/security/crypto/post-quantum/index.js +236 -0
  1198. package/dist/security/crypto/post-quantum/index.js.map +1 -0
  1199. package/dist/security/crypto/post-quantum/kyber.d.ts +129 -0
  1200. package/dist/security/crypto/post-quantum/kyber.d.ts.map +1 -0
  1201. package/dist/security/crypto/post-quantum/kyber.js +649 -0
  1202. package/dist/security/crypto/post-quantum/kyber.js.map +1 -0
  1203. package/dist/security/crypto/post-quantum/migration.d.ts +230 -0
  1204. package/dist/security/crypto/post-quantum/migration.d.ts.map +1 -0
  1205. package/dist/security/crypto/post-quantum/migration.js +563 -0
  1206. package/dist/security/crypto/post-quantum/migration.js.map +1 -0
  1207. package/dist/security/crypto/post-quantum/types.d.ts +1056 -0
  1208. package/dist/security/crypto/post-quantum/types.d.ts.map +1 -0
  1209. package/dist/security/crypto/post-quantum/types.js +350 -0
  1210. package/dist/security/crypto/post-quantum/types.js.map +1 -0
  1211. package/dist/security/crypto/shamir/comparison.d.ts +128 -0
  1212. package/dist/security/crypto/shamir/comparison.d.ts.map +1 -0
  1213. package/dist/security/crypto/shamir/comparison.js +423 -0
  1214. package/dist/security/crypto/shamir/comparison.js.map +1 -0
  1215. package/dist/security/crypto/shamir/index.d.ts +76 -0
  1216. package/dist/security/crypto/shamir/index.d.ts.map +1 -0
  1217. package/dist/security/crypto/shamir/index.js +155 -0
  1218. package/dist/security/crypto/shamir/index.js.map +1 -0
  1219. package/dist/security/crypto/shamir/proofs.d.ts +259 -0
  1220. package/dist/security/crypto/shamir/proofs.d.ts.map +1 -0
  1221. package/dist/security/crypto/shamir/proofs.js +605 -0
  1222. package/dist/security/crypto/shamir/proofs.js.map +1 -0
  1223. package/dist/security/crypto/shamir/property-tests.d.ts +104 -0
  1224. package/dist/security/crypto/shamir/property-tests.d.ts.map +1 -0
  1225. package/dist/security/crypto/shamir/property-tests.js +480 -0
  1226. package/dist/security/crypto/shamir/property-tests.js.map +1 -0
  1227. package/dist/security/crypto/shamir/security-analysis.d.ts +97 -0
  1228. package/dist/security/crypto/shamir/security-analysis.d.ts.map +1 -0
  1229. package/dist/security/crypto/shamir/security-analysis.js +503 -0
  1230. package/dist/security/crypto/shamir/security-analysis.js.map +1 -0
  1231. package/dist/security/crypto/shamir/test-vectors.d.ts +116 -0
  1232. package/dist/security/crypto/shamir/test-vectors.d.ts.map +1 -0
  1233. package/dist/security/crypto/shamir/test-vectors.js +377 -0
  1234. package/dist/security/crypto/shamir/test-vectors.js.map +1 -0
  1235. package/dist/security/crypto/shamir/types.d.ts +281 -0
  1236. package/dist/security/crypto/shamir/types.d.ts.map +1 -0
  1237. package/dist/security/crypto/shamir/types.js +82 -0
  1238. package/dist/security/crypto/shamir/types.js.map +1 -0
  1239. package/dist/security/crypto/shamir/verified-shamir.d.ts +170 -0
  1240. package/dist/security/crypto/shamir/verified-shamir.d.ts.map +1 -0
  1241. package/dist/security/crypto/shamir/verified-shamir.js +624 -0
  1242. package/dist/security/crypto/shamir/verified-shamir.js.map +1 -0
  1243. package/dist/security/csrf.d.ts +215 -0
  1244. package/dist/security/csrf.d.ts.map +1 -0
  1245. package/dist/security/csrf.js +467 -0
  1246. package/dist/security/csrf.js.map +1 -0
  1247. package/dist/security/distributed-state.d.ts +331 -0
  1248. package/dist/security/distributed-state.d.ts.map +1 -0
  1249. package/dist/security/distributed-state.js +768 -0
  1250. package/dist/security/distributed-state.js.map +1 -0
  1251. package/dist/security/dlp/index.d.ts +27 -0
  1252. package/dist/security/dlp/index.d.ts.map +1 -0
  1253. package/dist/security/dlp/index.js +54 -0
  1254. package/dist/security/dlp/index.js.map +1 -0
  1255. package/dist/security/dlp/scanner.d.ts +451 -0
  1256. package/dist/security/dlp/scanner.d.ts.map +1 -0
  1257. package/dist/security/dlp/scanner.js +1241 -0
  1258. package/dist/security/dlp/scanner.js.map +1 -0
  1259. package/dist/security/dpop.d.ts +260 -0
  1260. package/dist/security/dpop.d.ts.map +1 -0
  1261. package/dist/security/dpop.js +1058 -0
  1262. package/dist/security/dpop.js.map +1 -0
  1263. package/dist/security/encryption/decorators.d.ts +263 -0
  1264. package/dist/security/encryption/decorators.d.ts.map +1 -0
  1265. package/dist/security/encryption/decorators.js +359 -0
  1266. package/dist/security/encryption/decorators.js.map +1 -0
  1267. package/dist/security/encryption/index.d.ts +83 -0
  1268. package/dist/security/encryption/index.d.ts.map +1 -0
  1269. package/dist/security/encryption/index.js +140 -0
  1270. package/dist/security/encryption/index.js.map +1 -0
  1271. package/dist/security/encryption/key-provider.d.ts +335 -0
  1272. package/dist/security/encryption/key-provider.d.ts.map +1 -0
  1273. package/dist/security/encryption/key-provider.js +853 -0
  1274. package/dist/security/encryption/key-provider.js.map +1 -0
  1275. package/dist/security/encryption/middleware.d.ts +279 -0
  1276. package/dist/security/encryption/middleware.d.ts.map +1 -0
  1277. package/dist/security/encryption/middleware.js +493 -0
  1278. package/dist/security/encryption/middleware.js.map +1 -0
  1279. package/dist/security/encryption/service.d.ts +164 -0
  1280. package/dist/security/encryption/service.d.ts.map +1 -0
  1281. package/dist/security/encryption/service.js +623 -0
  1282. package/dist/security/encryption/service.js.map +1 -0
  1283. package/dist/security/encryption/types.d.ts +745 -0
  1284. package/dist/security/encryption/types.d.ts.map +1 -0
  1285. package/dist/security/encryption/types.js +229 -0
  1286. package/dist/security/encryption/types.js.map +1 -0
  1287. package/dist/security/error-sanitizer.d.ts +329 -0
  1288. package/dist/security/error-sanitizer.d.ts.map +1 -0
  1289. package/dist/security/error-sanitizer.js +693 -0
  1290. package/dist/security/error-sanitizer.js.map +1 -0
  1291. package/dist/security/fingerprint-service.d.ts +139 -0
  1292. package/dist/security/fingerprint-service.d.ts.map +1 -0
  1293. package/dist/security/fingerprint-service.js +240 -0
  1294. package/dist/security/fingerprint-service.js.map +1 -0
  1295. package/dist/security/headers/csp.d.ts +270 -0
  1296. package/dist/security/headers/csp.d.ts.map +1 -0
  1297. package/dist/security/headers/csp.js +655 -0
  1298. package/dist/security/headers/csp.js.map +1 -0
  1299. package/dist/security/headers/hsts.d.ts +161 -0
  1300. package/dist/security/headers/hsts.d.ts.map +1 -0
  1301. package/dist/security/headers/hsts.js +346 -0
  1302. package/dist/security/headers/hsts.js.map +1 -0
  1303. package/dist/security/headers/index.d.ts +47 -0
  1304. package/dist/security/headers/index.d.ts.map +1 -0
  1305. package/dist/security/headers/index.js +110 -0
  1306. package/dist/security/headers/index.js.map +1 -0
  1307. package/dist/security/headers/middleware.d.ts +70 -0
  1308. package/dist/security/headers/middleware.d.ts.map +1 -0
  1309. package/dist/security/headers/middleware.js +549 -0
  1310. package/dist/security/headers/middleware.js.map +1 -0
  1311. package/dist/security/headers/permissions-policy.d.ts +189 -0
  1312. package/dist/security/headers/permissions-policy.d.ts.map +1 -0
  1313. package/dist/security/headers/permissions-policy.js +508 -0
  1314. package/dist/security/headers/permissions-policy.js.map +1 -0
  1315. package/dist/security/headers/types.d.ts +1570 -0
  1316. package/dist/security/headers/types.d.ts.map +1 -0
  1317. package/dist/security/headers/types.js +281 -0
  1318. package/dist/security/headers/types.js.map +1 -0
  1319. package/dist/security/headers/validator.d.ts +36 -0
  1320. package/dist/security/headers/validator.d.ts.map +1 -0
  1321. package/dist/security/headers/validator.js +616 -0
  1322. package/dist/security/headers/validator.js.map +1 -0
  1323. package/dist/security/hsm/aws-cloudhsm.d.ts +157 -0
  1324. package/dist/security/hsm/aws-cloudhsm.d.ts.map +1 -0
  1325. package/dist/security/hsm/aws-cloudhsm.js +712 -0
  1326. package/dist/security/hsm/aws-cloudhsm.js.map +1 -0
  1327. package/dist/security/hsm/azure-hsm.d.ts +174 -0
  1328. package/dist/security/hsm/azure-hsm.d.ts.map +1 -0
  1329. package/dist/security/hsm/azure-hsm.js +792 -0
  1330. package/dist/security/hsm/azure-hsm.js.map +1 -0
  1331. package/dist/security/hsm/gcp-hsm.d.ts +184 -0
  1332. package/dist/security/hsm/gcp-hsm.d.ts.map +1 -0
  1333. package/dist/security/hsm/gcp-hsm.js +817 -0
  1334. package/dist/security/hsm/gcp-hsm.js.map +1 -0
  1335. package/dist/security/hsm/hsm-service.d.ts +264 -0
  1336. package/dist/security/hsm/hsm-service.d.ts.map +1 -0
  1337. package/dist/security/hsm/hsm-service.js +772 -0
  1338. package/dist/security/hsm/hsm-service.js.map +1 -0
  1339. package/dist/security/hsm/index.d.ts +132 -0
  1340. package/dist/security/hsm/index.d.ts.map +1 -0
  1341. package/dist/security/hsm/index.js +198 -0
  1342. package/dist/security/hsm/index.js.map +1 -0
  1343. package/dist/security/hsm/key-ceremony.d.ts +214 -0
  1344. package/dist/security/hsm/key-ceremony.d.ts.map +1 -0
  1345. package/dist/security/hsm/key-ceremony.js +636 -0
  1346. package/dist/security/hsm/key-ceremony.js.map +1 -0
  1347. package/dist/security/hsm/local-softHSM.d.ts +122 -0
  1348. package/dist/security/hsm/local-softHSM.d.ts.map +1 -0
  1349. package/dist/security/hsm/local-softHSM.js +786 -0
  1350. package/dist/security/hsm/local-softHSM.js.map +1 -0
  1351. package/dist/security/hsm/provider.d.ts +333 -0
  1352. package/dist/security/hsm/provider.d.ts.map +1 -0
  1353. package/dist/security/hsm/provider.js +264 -0
  1354. package/dist/security/hsm/provider.js.map +1 -0
  1355. package/dist/security/hsm/thales-luna.d.ts +209 -0
  1356. package/dist/security/hsm/thales-luna.d.ts.map +1 -0
  1357. package/dist/security/hsm/thales-luna.js +820 -0
  1358. package/dist/security/hsm/thales-luna.js.map +1 -0
  1359. package/dist/security/incident/actions/block-ip.d.ts +84 -0
  1360. package/dist/security/incident/actions/block-ip.d.ts.map +1 -0
  1361. package/dist/security/incident/actions/block-ip.js +464 -0
  1362. package/dist/security/incident/actions/block-ip.js.map +1 -0
  1363. package/dist/security/incident/actions/collect-evidence.d.ts +95 -0
  1364. package/dist/security/incident/actions/collect-evidence.d.ts.map +1 -0
  1365. package/dist/security/incident/actions/collect-evidence.js +458 -0
  1366. package/dist/security/incident/actions/collect-evidence.js.map +1 -0
  1367. package/dist/security/incident/actions/index.d.ts +39 -0
  1368. package/dist/security/incident/actions/index.d.ts.map +1 -0
  1369. package/dist/security/incident/actions/index.js +52 -0
  1370. package/dist/security/incident/actions/index.js.map +1 -0
  1371. package/dist/security/incident/actions/isolate-system.d.ts +63 -0
  1372. package/dist/security/incident/actions/isolate-system.d.ts.map +1 -0
  1373. package/dist/security/incident/actions/isolate-system.js +379 -0
  1374. package/dist/security/incident/actions/isolate-system.js.map +1 -0
  1375. package/dist/security/incident/actions/notify-stakeholders.d.ts +72 -0
  1376. package/dist/security/incident/actions/notify-stakeholders.d.ts.map +1 -0
  1377. package/dist/security/incident/actions/notify-stakeholders.js +387 -0
  1378. package/dist/security/incident/actions/notify-stakeholders.js.map +1 -0
  1379. package/dist/security/incident/actions/revoke-credentials.d.ts +77 -0
  1380. package/dist/security/incident/actions/revoke-credentials.d.ts.map +1 -0
  1381. package/dist/security/incident/actions/revoke-credentials.js +329 -0
  1382. package/dist/security/incident/actions/revoke-credentials.js.map +1 -0
  1383. package/dist/security/incident/actions/scale-monitoring.d.ts +90 -0
  1384. package/dist/security/incident/actions/scale-monitoring.d.ts.map +1 -0
  1385. package/dist/security/incident/actions/scale-monitoring.js +483 -0
  1386. package/dist/security/incident/actions/scale-monitoring.js.map +1 -0
  1387. package/dist/security/incident/executor.d.ts +128 -0
  1388. package/dist/security/incident/executor.d.ts.map +1 -0
  1389. package/dist/security/incident/executor.js +695 -0
  1390. package/dist/security/incident/executor.js.map +1 -0
  1391. package/dist/security/incident/index.d.ts +220 -0
  1392. package/dist/security/incident/index.d.ts.map +1 -0
  1393. package/dist/security/incident/index.js +1284 -0
  1394. package/dist/security/incident/index.js.map +1 -0
  1395. package/dist/security/incident/notification.d.ts +68 -0
  1396. package/dist/security/incident/notification.d.ts.map +1 -0
  1397. package/dist/security/incident/notification.js +512 -0
  1398. package/dist/security/incident/notification.js.map +1 -0
  1399. package/dist/security/incident/playbooks/account-compromise.d.ts +13 -0
  1400. package/dist/security/incident/playbooks/account-compromise.d.ts.map +1 -0
  1401. package/dist/security/incident/playbooks/account-compromise.js +379 -0
  1402. package/dist/security/incident/playbooks/account-compromise.js.map +1 -0
  1403. package/dist/security/incident/playbooks/configuration-error.d.ts +17 -0
  1404. package/dist/security/incident/playbooks/configuration-error.d.ts.map +1 -0
  1405. package/dist/security/incident/playbooks/configuration-error.js +340 -0
  1406. package/dist/security/incident/playbooks/configuration-error.js.map +1 -0
  1407. package/dist/security/incident/playbooks/data-breach.d.ts +13 -0
  1408. package/dist/security/incident/playbooks/data-breach.d.ts.map +1 -0
  1409. package/dist/security/incident/playbooks/data-breach.js +394 -0
  1410. package/dist/security/incident/playbooks/data-breach.js.map +1 -0
  1411. package/dist/security/incident/playbooks/denial-of-service.d.ts +13 -0
  1412. package/dist/security/incident/playbooks/denial-of-service.d.ts.map +1 -0
  1413. package/dist/security/incident/playbooks/denial-of-service.js +540 -0
  1414. package/dist/security/incident/playbooks/denial-of-service.js.map +1 -0
  1415. package/dist/security/incident/playbooks/index.d.ts +36 -0
  1416. package/dist/security/incident/playbooks/index.d.ts.map +1 -0
  1417. package/dist/security/incident/playbooks/index.js +56 -0
  1418. package/dist/security/incident/playbooks/index.js.map +1 -0
  1419. package/dist/security/incident/playbooks/insider-threat.d.ts +18 -0
  1420. package/dist/security/incident/playbooks/insider-threat.d.ts.map +1 -0
  1421. package/dist/security/incident/playbooks/insider-threat.js +600 -0
  1422. package/dist/security/incident/playbooks/insider-threat.js.map +1 -0
  1423. package/dist/security/incident/playbooks/malware.d.ts +13 -0
  1424. package/dist/security/incident/playbooks/malware.d.ts.map +1 -0
  1425. package/dist/security/incident/playbooks/malware.js +515 -0
  1426. package/dist/security/incident/playbooks/malware.js.map +1 -0
  1427. package/dist/security/incident/playbooks/ransomware.d.ts +14 -0
  1428. package/dist/security/incident/playbooks/ransomware.d.ts.map +1 -0
  1429. package/dist/security/incident/playbooks/ransomware.js +693 -0
  1430. package/dist/security/incident/playbooks/ransomware.js.map +1 -0
  1431. package/dist/security/incident/playbooks/unauthorized-access.d.ts +13 -0
  1432. package/dist/security/incident/playbooks/unauthorized-access.d.ts.map +1 -0
  1433. package/dist/security/incident/playbooks/unauthorized-access.js +412 -0
  1434. package/dist/security/incident/playbooks/unauthorized-access.js.map +1 -0
  1435. package/dist/security/incident/triggers.d.ts +120 -0
  1436. package/dist/security/incident/triggers.d.ts.map +1 -0
  1437. package/dist/security/incident/triggers.js +708 -0
  1438. package/dist/security/incident/triggers.js.map +1 -0
  1439. package/dist/security/incident/types.d.ts +1517 -0
  1440. package/dist/security/incident/types.d.ts.map +1 -0
  1441. package/dist/security/incident/types.js +222 -0
  1442. package/dist/security/incident/types.js.map +1 -0
  1443. package/dist/security/index.d.ts +56 -0
  1444. package/dist/security/index.d.ts.map +1 -0
  1445. package/dist/security/index.js +267 -0
  1446. package/dist/security/index.js.map +1 -0
  1447. package/dist/security/injection-detector.d.ts +375 -0
  1448. package/dist/security/injection-detector.d.ts.map +1 -0
  1449. package/dist/security/injection-detector.js +969 -0
  1450. package/dist/security/injection-detector.js.map +1 -0
  1451. package/dist/security/introspection.d.ts +137 -0
  1452. package/dist/security/introspection.d.ts.map +1 -0
  1453. package/dist/security/introspection.js +451 -0
  1454. package/dist/security/introspection.js.map +1 -0
  1455. package/dist/security/key-rotation.d.ts +213 -0
  1456. package/dist/security/key-rotation.d.ts.map +1 -0
  1457. package/dist/security/key-rotation.js +530 -0
  1458. package/dist/security/key-rotation.js.map +1 -0
  1459. package/dist/security/kms/aws-kms.d.ts +152 -0
  1460. package/dist/security/kms/aws-kms.d.ts.map +1 -0
  1461. package/dist/security/kms/aws-kms.js +808 -0
  1462. package/dist/security/kms/aws-kms.js.map +1 -0
  1463. package/dist/security/kms/index.d.ts +165 -0
  1464. package/dist/security/kms/index.d.ts.map +1 -0
  1465. package/dist/security/kms/index.js +351 -0
  1466. package/dist/security/kms/index.js.map +1 -0
  1467. package/dist/security/kms/local.d.ts +127 -0
  1468. package/dist/security/kms/local.d.ts.map +1 -0
  1469. package/dist/security/kms/local.js +682 -0
  1470. package/dist/security/kms/local.js.map +1 -0
  1471. package/dist/security/kms/types.d.ts +1000 -0
  1472. package/dist/security/kms/types.d.ts.map +1 -0
  1473. package/dist/security/kms/types.js +167 -0
  1474. package/dist/security/kms/types.js.map +1 -0
  1475. package/dist/security/kms/vault.d.ts +165 -0
  1476. package/dist/security/kms/vault.d.ts.map +1 -0
  1477. package/dist/security/kms/vault.js +820 -0
  1478. package/dist/security/kms/vault.js.map +1 -0
  1479. package/dist/security/mfa/index.d.ts +17 -0
  1480. package/dist/security/mfa/index.d.ts.map +1 -0
  1481. package/dist/security/mfa/index.js +37 -0
  1482. package/dist/security/mfa/index.js.map +1 -0
  1483. package/dist/security/mfa/mfa-middleware.d.ts +74 -0
  1484. package/dist/security/mfa/mfa-middleware.d.ts.map +1 -0
  1485. package/dist/security/mfa/mfa-middleware.js +244 -0
  1486. package/dist/security/mfa/mfa-middleware.js.map +1 -0
  1487. package/dist/security/mfa/mfa-service.d.ts +115 -0
  1488. package/dist/security/mfa/mfa-service.d.ts.map +1 -0
  1489. package/dist/security/mfa/mfa-service.js +508 -0
  1490. package/dist/security/mfa/mfa-service.js.map +1 -0
  1491. package/dist/security/mfa/mfa-store.d.ts +615 -0
  1492. package/dist/security/mfa/mfa-store.d.ts.map +1 -0
  1493. package/dist/security/mfa/mfa-store.js +431 -0
  1494. package/dist/security/mfa/mfa-store.js.map +1 -0
  1495. package/dist/security/mfa/types.d.ts +417 -0
  1496. package/dist/security/mfa/types.d.ts.map +1 -0
  1497. package/dist/security/mfa/types.js +123 -0
  1498. package/dist/security/mfa/types.js.map +1 -0
  1499. package/dist/security/middleware.d.ts +179 -0
  1500. package/dist/security/middleware.d.ts.map +1 -0
  1501. package/dist/security/middleware.js +534 -0
  1502. package/dist/security/middleware.js.map +1 -0
  1503. package/dist/security/pairwise-did.d.ts +157 -0
  1504. package/dist/security/pairwise-did.d.ts.map +1 -0
  1505. package/dist/security/pairwise-did.js +450 -0
  1506. package/dist/security/pairwise-did.js.map +1 -0
  1507. package/dist/security/pam/break-glass.d.ts +776 -0
  1508. package/dist/security/pam/break-glass.d.ts.map +1 -0
  1509. package/dist/security/pam/break-glass.js +1137 -0
  1510. package/dist/security/pam/break-glass.js.map +1 -0
  1511. package/dist/security/pam/index.d.ts +120 -0
  1512. package/dist/security/pam/index.d.ts.map +1 -0
  1513. package/dist/security/pam/index.js +179 -0
  1514. package/dist/security/pam/index.js.map +1 -0
  1515. package/dist/security/pam/jit-access.d.ts +482 -0
  1516. package/dist/security/pam/jit-access.d.ts.map +1 -0
  1517. package/dist/security/pam/jit-access.js +1030 -0
  1518. package/dist/security/pam/jit-access.js.map +1 -0
  1519. package/dist/security/pam/session-recording.d.ts +1007 -0
  1520. package/dist/security/pam/session-recording.d.ts.map +1 -0
  1521. package/dist/security/pam/session-recording.js +1047 -0
  1522. package/dist/security/pam/session-recording.js.map +1 -0
  1523. package/dist/security/password-hashing.d.ts +199 -0
  1524. package/dist/security/password-hashing.d.ts.map +1 -0
  1525. package/dist/security/password-hashing.js +366 -0
  1526. package/dist/security/password-hashing.js.map +1 -0
  1527. package/dist/security/password-policy.d.ts +304 -0
  1528. package/dist/security/password-policy.d.ts.map +1 -0
  1529. package/dist/security/password-policy.js +730 -0
  1530. package/dist/security/password-policy.js.map +1 -0
  1531. package/dist/security/policy-engine/atsf-adapter.d.ts +93 -0
  1532. package/dist/security/policy-engine/atsf-adapter.d.ts.map +1 -0
  1533. package/dist/security/policy-engine/atsf-adapter.js +265 -0
  1534. package/dist/security/policy-engine/atsf-adapter.js.map +1 -0
  1535. package/dist/security/policy-engine/built-in-policies.d.ts +90 -0
  1536. package/dist/security/policy-engine/built-in-policies.d.ts.map +1 -0
  1537. package/dist/security/policy-engine/built-in-policies.js +627 -0
  1538. package/dist/security/policy-engine/built-in-policies.js.map +1 -0
  1539. package/dist/security/policy-engine/condition-evaluator.d.ts +129 -0
  1540. package/dist/security/policy-engine/condition-evaluator.d.ts.map +1 -0
  1541. package/dist/security/policy-engine/condition-evaluator.js +647 -0
  1542. package/dist/security/policy-engine/condition-evaluator.js.map +1 -0
  1543. package/dist/security/policy-engine/engine.d.ts +200 -0
  1544. package/dist/security/policy-engine/engine.d.ts.map +1 -0
  1545. package/dist/security/policy-engine/engine.js +752 -0
  1546. package/dist/security/policy-engine/engine.js.map +1 -0
  1547. package/dist/security/policy-engine/index.d.ts +59 -0
  1548. package/dist/security/policy-engine/index.d.ts.map +1 -0
  1549. package/dist/security/policy-engine/index.js +84 -0
  1550. package/dist/security/policy-engine/index.js.map +1 -0
  1551. package/dist/security/policy-engine/middleware.d.ts +77 -0
  1552. package/dist/security/policy-engine/middleware.d.ts.map +1 -0
  1553. package/dist/security/policy-engine/middleware.js +375 -0
  1554. package/dist/security/policy-engine/middleware.js.map +1 -0
  1555. package/dist/security/policy-engine/rule-evaluator.d.ts +140 -0
  1556. package/dist/security/policy-engine/rule-evaluator.d.ts.map +1 -0
  1557. package/dist/security/policy-engine/rule-evaluator.js +593 -0
  1558. package/dist/security/policy-engine/rule-evaluator.js.map +1 -0
  1559. package/dist/security/policy-engine/types.d.ts +2855 -0
  1560. package/dist/security/policy-engine/types.d.ts.map +1 -0
  1561. package/dist/security/policy-engine/types.js +443 -0
  1562. package/dist/security/policy-engine/types.js.map +1 -0
  1563. package/dist/security/refresh-token.d.ts +305 -0
  1564. package/dist/security/refresh-token.d.ts.map +1 -0
  1565. package/dist/security/refresh-token.js +678 -0
  1566. package/dist/security/refresh-token.js.map +1 -0
  1567. package/dist/security/request-integrity.d.ts +289 -0
  1568. package/dist/security/request-integrity.d.ts.map +1 -0
  1569. package/dist/security/request-integrity.js +663 -0
  1570. package/dist/security/request-integrity.js.map +1 -0
  1571. package/dist/security/revocation-check.d.ts +188 -0
  1572. package/dist/security/revocation-check.d.ts.map +1 -0
  1573. package/dist/security/revocation-check.js +606 -0
  1574. package/dist/security/revocation-check.js.map +1 -0
  1575. package/dist/security/revocation.d.ts +191 -0
  1576. package/dist/security/revocation.d.ts.map +1 -0
  1577. package/dist/security/revocation.js +522 -0
  1578. package/dist/security/revocation.js.map +1 -0
  1579. package/dist/security/secrets-rotation.d.ts +501 -0
  1580. package/dist/security/secrets-rotation.d.ts.map +1 -0
  1581. package/dist/security/secrets-rotation.js +934 -0
  1582. package/dist/security/secrets-rotation.js.map +1 -0
  1583. package/dist/security/secure-memory.d.ts +325 -0
  1584. package/dist/security/secure-memory.d.ts.map +1 -0
  1585. package/dist/security/secure-memory.js +595 -0
  1586. package/dist/security/secure-memory.js.map +1 -0
  1587. package/dist/security/security-service.d.ts +186 -0
  1588. package/dist/security/security-service.d.ts.map +1 -0
  1589. package/dist/security/security-service.js +531 -0
  1590. package/dist/security/security-service.js.map +1 -0
  1591. package/dist/security/service-auth/index.d.ts +20 -0
  1592. package/dist/security/service-auth/index.d.ts.map +1 -0
  1593. package/dist/security/service-auth/index.js +61 -0
  1594. package/dist/security/service-auth/index.js.map +1 -0
  1595. package/dist/security/service-auth/service-account.d.ts +357 -0
  1596. package/dist/security/service-auth/service-account.d.ts.map +1 -0
  1597. package/dist/security/service-auth/service-account.js +475 -0
  1598. package/dist/security/service-auth/service-account.js.map +1 -0
  1599. package/dist/security/service-auth/service-auth-middleware.d.ts +174 -0
  1600. package/dist/security/service-auth/service-auth-middleware.d.ts.map +1 -0
  1601. package/dist/security/service-auth/service-auth-middleware.js +461 -0
  1602. package/dist/security/service-auth/service-auth-middleware.js.map +1 -0
  1603. package/dist/security/service-auth/service-token.d.ts +391 -0
  1604. package/dist/security/service-auth/service-token.d.ts.map +1 -0
  1605. package/dist/security/service-auth/service-token.js +472 -0
  1606. package/dist/security/service-auth/service-token.js.map +1 -0
  1607. package/dist/security/session-manager.d.ts +177 -0
  1608. package/dist/security/session-manager.d.ts.map +1 -0
  1609. package/dist/security/session-manager.js +353 -0
  1610. package/dist/security/session-manager.js.map +1 -0
  1611. package/dist/security/session-store.d.ts +205 -0
  1612. package/dist/security/session-store.d.ts.map +1 -0
  1613. package/dist/security/session-store.js +581 -0
  1614. package/dist/security/session-store.js.map +1 -0
  1615. package/dist/security/siem/connector.d.ts +147 -0
  1616. package/dist/security/siem/connector.d.ts.map +1 -0
  1617. package/dist/security/siem/connector.js +254 -0
  1618. package/dist/security/siem/connector.js.map +1 -0
  1619. package/dist/security/siem/datadog.d.ts +81 -0
  1620. package/dist/security/siem/datadog.d.ts.map +1 -0
  1621. package/dist/security/siem/datadog.js +362 -0
  1622. package/dist/security/siem/datadog.js.map +1 -0
  1623. package/dist/security/siem/elastic.d.ts +83 -0
  1624. package/dist/security/siem/elastic.d.ts.map +1 -0
  1625. package/dist/security/siem/elastic.js +514 -0
  1626. package/dist/security/siem/elastic.js.map +1 -0
  1627. package/dist/security/siem/enrichment.d.ts +133 -0
  1628. package/dist/security/siem/enrichment.d.ts.map +1 -0
  1629. package/dist/security/siem/enrichment.js +434 -0
  1630. package/dist/security/siem/enrichment.js.map +1 -0
  1631. package/dist/security/siem/formatter.d.ts +118 -0
  1632. package/dist/security/siem/formatter.d.ts.map +1 -0
  1633. package/dist/security/siem/formatter.js +381 -0
  1634. package/dist/security/siem/formatter.js.map +1 -0
  1635. package/dist/security/siem/hooks.d.ts +107 -0
  1636. package/dist/security/siem/hooks.d.ts.map +1 -0
  1637. package/dist/security/siem/hooks.js +459 -0
  1638. package/dist/security/siem/hooks.js.map +1 -0
  1639. package/dist/security/siem/index.d.ts +83 -0
  1640. package/dist/security/siem/index.d.ts.map +1 -0
  1641. package/dist/security/siem/index.js +95 -0
  1642. package/dist/security/siem/index.js.map +1 -0
  1643. package/dist/security/siem/service.d.ts +153 -0
  1644. package/dist/security/siem/service.d.ts.map +1 -0
  1645. package/dist/security/siem/service.js +615 -0
  1646. package/dist/security/siem/service.js.map +1 -0
  1647. package/dist/security/siem/splunk.d.ts +76 -0
  1648. package/dist/security/siem/splunk.d.ts.map +1 -0
  1649. package/dist/security/siem/splunk.js +283 -0
  1650. package/dist/security/siem/splunk.js.map +1 -0
  1651. package/dist/security/siem/types.d.ts +1980 -0
  1652. package/dist/security/siem/types.d.ts.map +1 -0
  1653. package/dist/security/siem/types.js +268 -0
  1654. package/dist/security/siem/types.js.map +1 -0
  1655. package/dist/security/tee.d.ts +157 -0
  1656. package/dist/security/tee.d.ts.map +1 -0
  1657. package/dist/security/tee.js +1073 -0
  1658. package/dist/security/tee.js.map +1 -0
  1659. package/dist/security/threat-intel/bot-detection.d.ts +275 -0
  1660. package/dist/security/threat-intel/bot-detection.d.ts.map +1 -0
  1661. package/dist/security/threat-intel/bot-detection.js +890 -0
  1662. package/dist/security/threat-intel/bot-detection.js.map +1 -0
  1663. package/dist/security/threat-intel/credential-stuffing.d.ts +368 -0
  1664. package/dist/security/threat-intel/credential-stuffing.d.ts.map +1 -0
  1665. package/dist/security/threat-intel/credential-stuffing.js +957 -0
  1666. package/dist/security/threat-intel/credential-stuffing.js.map +1 -0
  1667. package/dist/security/threat-intel/index.d.ts +10 -0
  1668. package/dist/security/threat-intel/index.d.ts.map +1 -0
  1669. package/dist/security/threat-intel/index.js +18 -0
  1670. package/dist/security/threat-intel/index.js.map +1 -0
  1671. package/dist/security/threat-intel/ip-reputation.d.ts +323 -0
  1672. package/dist/security/threat-intel/ip-reputation.d.ts.map +1 -0
  1673. package/dist/security/threat-intel/ip-reputation.js +923 -0
  1674. package/dist/security/threat-intel/ip-reputation.js.map +1 -0
  1675. package/dist/security/token-lifecycle.d.ts +272 -0
  1676. package/dist/security/token-lifecycle.d.ts.map +1 -0
  1677. package/dist/security/token-lifecycle.js +732 -0
  1678. package/dist/security/token-lifecycle.js.map +1 -0
  1679. package/dist/security/token-lifetime.d.ts +206 -0
  1680. package/dist/security/token-lifetime.d.ts.map +1 -0
  1681. package/dist/security/token-lifetime.js +388 -0
  1682. package/dist/security/token-lifetime.js.map +1 -0
  1683. package/dist/security/trust-oracle/alerts.d.ts +202 -0
  1684. package/dist/security/trust-oracle/alerts.d.ts.map +1 -0
  1685. package/dist/security/trust-oracle/alerts.js +763 -0
  1686. package/dist/security/trust-oracle/alerts.js.map +1 -0
  1687. package/dist/security/trust-oracle/api.d.ts +116 -0
  1688. package/dist/security/trust-oracle/api.d.ts.map +1 -0
  1689. package/dist/security/trust-oracle/api.js +721 -0
  1690. package/dist/security/trust-oracle/api.js.map +1 -0
  1691. package/dist/security/trust-oracle/continuous-monitoring.d.ts +105 -0
  1692. package/dist/security/trust-oracle/continuous-monitoring.d.ts.map +1 -0
  1693. package/dist/security/trust-oracle/continuous-monitoring.js +710 -0
  1694. package/dist/security/trust-oracle/continuous-monitoring.js.map +1 -0
  1695. package/dist/security/trust-oracle/data-sources.d.ts +102 -0
  1696. package/dist/security/trust-oracle/data-sources.d.ts.map +1 -0
  1697. package/dist/security/trust-oracle/data-sources.js +794 -0
  1698. package/dist/security/trust-oracle/data-sources.js.map +1 -0
  1699. package/dist/security/trust-oracle/index.d.ts +79 -0
  1700. package/dist/security/trust-oracle/index.d.ts.map +1 -0
  1701. package/dist/security/trust-oracle/index.js +206 -0
  1702. package/dist/security/trust-oracle/index.js.map +1 -0
  1703. package/dist/security/trust-oracle/oracle.d.ts +125 -0
  1704. package/dist/security/trust-oracle/oracle.d.ts.map +1 -0
  1705. package/dist/security/trust-oracle/oracle.js +489 -0
  1706. package/dist/security/trust-oracle/oracle.js.map +1 -0
  1707. package/dist/security/trust-oracle/reporting.d.ts +145 -0
  1708. package/dist/security/trust-oracle/reporting.d.ts.map +1 -0
  1709. package/dist/security/trust-oracle/reporting.js +1098 -0
  1710. package/dist/security/trust-oracle/reporting.js.map +1 -0
  1711. package/dist/security/trust-oracle/risk-scorer.d.ts +207 -0
  1712. package/dist/security/trust-oracle/risk-scorer.d.ts.map +1 -0
  1713. package/dist/security/trust-oracle/risk-scorer.js +1033 -0
  1714. package/dist/security/trust-oracle/risk-scorer.js.map +1 -0
  1715. package/dist/security/trust-oracle/types.d.ts +444 -0
  1716. package/dist/security/trust-oracle/types.d.ts.map +1 -0
  1717. package/dist/security/trust-oracle/types.js +6 -0
  1718. package/dist/security/trust-oracle/types.js.map +1 -0
  1719. package/dist/security/trust-oracle/vendor-registry.d.ts +228 -0
  1720. package/dist/security/trust-oracle/vendor-registry.d.ts.map +1 -0
  1721. package/dist/security/trust-oracle/vendor-registry.js +727 -0
  1722. package/dist/security/trust-oracle/vendor-registry.js.map +1 -0
  1723. package/dist/security/types.d.ts +1796 -0
  1724. package/dist/security/types.d.ts.map +1 -0
  1725. package/dist/security/types.js +389 -0
  1726. package/dist/security/types.js.map +1 -0
  1727. package/dist/security/webauthn/index.d.ts +47 -0
  1728. package/dist/security/webauthn/index.d.ts.map +1 -0
  1729. package/dist/security/webauthn/index.js +48 -0
  1730. package/dist/security/webauthn/index.js.map +1 -0
  1731. package/dist/security/webauthn/middleware.d.ts +109 -0
  1732. package/dist/security/webauthn/middleware.d.ts.map +1 -0
  1733. package/dist/security/webauthn/middleware.js +629 -0
  1734. package/dist/security/webauthn/middleware.js.map +1 -0
  1735. package/dist/security/webauthn/service.d.ts +179 -0
  1736. package/dist/security/webauthn/service.d.ts.map +1 -0
  1737. package/dist/security/webauthn/service.js +757 -0
  1738. package/dist/security/webauthn/service.js.map +1 -0
  1739. package/dist/security/webauthn/store.d.ts +240 -0
  1740. package/dist/security/webauthn/store.d.ts.map +1 -0
  1741. package/dist/security/webauthn/store.js +505 -0
  1742. package/dist/security/webauthn/store.js.map +1 -0
  1743. package/dist/security/webauthn/types.d.ts +678 -0
  1744. package/dist/security/webauthn/types.d.ts.map +1 -0
  1745. package/dist/security/webauthn/types.js +176 -0
  1746. package/dist/security/webauthn/types.js.map +1 -0
  1747. package/dist/security/zkp/circuits.d.ts +296 -0
  1748. package/dist/security/zkp/circuits.d.ts.map +1 -0
  1749. package/dist/security/zkp/circuits.js +771 -0
  1750. package/dist/security/zkp/circuits.js.map +1 -0
  1751. package/dist/security/zkp/commitment.d.ts +319 -0
  1752. package/dist/security/zkp/commitment.d.ts.map +1 -0
  1753. package/dist/security/zkp/commitment.js +591 -0
  1754. package/dist/security/zkp/commitment.js.map +1 -0
  1755. package/dist/security/zkp/compliance.d.ts +251 -0
  1756. package/dist/security/zkp/compliance.d.ts.map +1 -0
  1757. package/dist/security/zkp/compliance.js +734 -0
  1758. package/dist/security/zkp/compliance.js.map +1 -0
  1759. package/dist/security/zkp/index.d.ts +184 -0
  1760. package/dist/security/zkp/index.d.ts.map +1 -0
  1761. package/dist/security/zkp/index.js +285 -0
  1762. package/dist/security/zkp/index.js.map +1 -0
  1763. package/dist/security/zkp/integration.d.ts +289 -0
  1764. package/dist/security/zkp/integration.d.ts.map +1 -0
  1765. package/dist/security/zkp/integration.js +571 -0
  1766. package/dist/security/zkp/integration.js.map +1 -0
  1767. package/dist/security/zkp/prover.d.ts +158 -0
  1768. package/dist/security/zkp/prover.d.ts.map +1 -0
  1769. package/dist/security/zkp/prover.js +465 -0
  1770. package/dist/security/zkp/prover.js.map +1 -0
  1771. package/dist/security/zkp/snark-utils.d.ts +321 -0
  1772. package/dist/security/zkp/snark-utils.d.ts.map +1 -0
  1773. package/dist/security/zkp/snark-utils.js +640 -0
  1774. package/dist/security/zkp/snark-utils.js.map +1 -0
  1775. package/dist/security/zkp/types.d.ts +1192 -0
  1776. package/dist/security/zkp/types.d.ts.map +1 -0
  1777. package/dist/security/zkp/types.js +264 -0
  1778. package/dist/security/zkp/types.js.map +1 -0
  1779. package/dist/security/zkp/verifier.d.ts +111 -0
  1780. package/dist/security/zkp/verifier.d.ts.map +1 -0
  1781. package/dist/security/zkp/verifier.js +554 -0
  1782. package/dist/security/zkp/verifier.js.map +1 -0
  1783. package/dist/semantic-governance/context-validator.d.ts +159 -0
  1784. package/dist/semantic-governance/context-validator.d.ts.map +1 -0
  1785. package/dist/semantic-governance/context-validator.js +599 -0
  1786. package/dist/semantic-governance/context-validator.js.map +1 -0
  1787. package/dist/semantic-governance/credential-manager.d.ts +156 -0
  1788. package/dist/semantic-governance/credential-manager.d.ts.map +1 -0
  1789. package/dist/semantic-governance/credential-manager.js +438 -0
  1790. package/dist/semantic-governance/credential-manager.js.map +1 -0
  1791. package/dist/semantic-governance/dual-channel.d.ts +138 -0
  1792. package/dist/semantic-governance/dual-channel.d.ts.map +1 -0
  1793. package/dist/semantic-governance/dual-channel.js +333 -0
  1794. package/dist/semantic-governance/dual-channel.js.map +1 -0
  1795. package/dist/semantic-governance/index.d.ts +107 -0
  1796. package/dist/semantic-governance/index.d.ts.map +1 -0
  1797. package/dist/semantic-governance/index.js +141 -0
  1798. package/dist/semantic-governance/index.js.map +1 -0
  1799. package/dist/semantic-governance/inference-validator.d.ts +114 -0
  1800. package/dist/semantic-governance/inference-validator.d.ts.map +1 -0
  1801. package/dist/semantic-governance/inference-validator.js +390 -0
  1802. package/dist/semantic-governance/inference-validator.js.map +1 -0
  1803. package/dist/semantic-governance/instruction-validator.d.ts +146 -0
  1804. package/dist/semantic-governance/instruction-validator.d.ts.map +1 -0
  1805. package/dist/semantic-governance/instruction-validator.js +357 -0
  1806. package/dist/semantic-governance/instruction-validator.js.map +1 -0
  1807. package/dist/semantic-governance/integration.d.ts +253 -0
  1808. package/dist/semantic-governance/integration.d.ts.map +1 -0
  1809. package/dist/semantic-governance/integration.js +657 -0
  1810. package/dist/semantic-governance/integration.js.map +1 -0
  1811. package/dist/semantic-governance/output-validator.d.ts +135 -0
  1812. package/dist/semantic-governance/output-validator.d.ts.map +1 -0
  1813. package/dist/semantic-governance/output-validator.js +442 -0
  1814. package/dist/semantic-governance/output-validator.js.map +1 -0
  1815. package/dist/semantic-governance/service.d.ts +120 -0
  1816. package/dist/semantic-governance/service.d.ts.map +1 -0
  1817. package/dist/semantic-governance/service.js +527 -0
  1818. package/dist/semantic-governance/service.js.map +1 -0
  1819. package/dist/semantic-governance/types.d.ts +3916 -0
  1820. package/dist/semantic-governance/types.d.ts.map +1 -0
  1821. package/dist/semantic-governance/types.js +462 -0
  1822. package/dist/semantic-governance/types.js.map +1 -0
  1823. package/dist/trust-engine/aci-integration.d.ts +6 -0
  1824. package/dist/trust-engine/aci-integration.d.ts.map +1 -0
  1825. package/dist/trust-engine/aci-integration.js +6 -0
  1826. package/dist/trust-engine/aci-integration.js.map +1 -0
  1827. package/dist/trust-engine/car-integration.d.ts +244 -0
  1828. package/dist/trust-engine/car-integration.d.ts.map +1 -0
  1829. package/dist/trust-engine/car-integration.js +332 -0
  1830. package/dist/trust-engine/car-integration.js.map +1 -0
  1831. package/dist/trust-engine/context.d.ts +197 -0
  1832. package/dist/trust-engine/context.d.ts.map +1 -0
  1833. package/dist/trust-engine/context.js +307 -0
  1834. package/dist/trust-engine/context.js.map +1 -0
  1835. package/dist/trust-engine/index.d.ts +410 -0
  1836. package/dist/trust-engine/index.d.ts.map +1 -0
  1837. package/dist/trust-engine/index.js +1221 -0
  1838. package/dist/trust-engine/index.js.map +1 -0
  1839. package/dist/trust-engine/observability.d.ts +175 -0
  1840. package/dist/trust-engine/observability.d.ts.map +1 -0
  1841. package/dist/trust-engine/observability.js +244 -0
  1842. package/dist/trust-engine/observability.js.map +1 -0
  1843. package/package.json +200 -0
@@ -0,0 +1,3916 @@
1
+ /**
2
+ * Semantic Governance Types - Layer 5
3
+ *
4
+ * Core types for semantic governance addressing the "confused deputy" problem
5
+ * where authenticated agents can be manipulated via prompt injection.
6
+ *
7
+ * This module provides:
8
+ * - Instruction Integrity (binding agents to approved prompts)
9
+ * - Output Schema Binding (constraining agent output)
10
+ * - Inference Scope Controls (limiting derived knowledge)
11
+ * - Context Authentication (securing the data plane)
12
+ * - Dual-Channel Authorization (separating control from data)
13
+ *
14
+ * @packageDocumentation
15
+ * @module @vorion/semantic-governance
16
+ */
17
+ import { z } from 'zod';
18
+ /**
19
+ * Domain codes representing capability areas
20
+ */
21
+ export type DomainCode = 'A' | 'B' | 'C' | 'D' | 'E' | 'F' | 'G' | 'H' | 'I' | 'S';
22
+ export declare const DomainCodeSchema: z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>;
23
+ /**
24
+ * Trust tiers indicating verification level
25
+ */
26
+ export declare enum TrustTier {
27
+ /** Sandbox — isolated testing */
28
+ T0_SANDBOX = 0,
29
+ /** Observed — read-only, monitored */
30
+ T1_OBSERVED = 1,
31
+ /** Provisional — basic operations, heavy supervision */
32
+ T2_PROVISIONAL = 2,
33
+ /** Monitored — standard operations, continuous monitoring */
34
+ T3_MONITORED = 3,
35
+ /** Standard — external API access, policy-governed */
36
+ T4_STANDARD = 4,
37
+ /** Trusted — cross-agent communication, delegated tasks */
38
+ T5_TRUSTED = 5,
39
+ /** Certified — admin tasks, agent spawning, minimal oversight */
40
+ T6_CERTIFIED = 6,
41
+ /** Autonomous — full autonomy, self-governance */
42
+ T7_AUTONOMOUS = 7
43
+ }
44
+ export declare const TrustTierSchema: z.ZodNativeEnum<typeof TrustTier>;
45
+ /**
46
+ * Instruction template definition with parameter schema
47
+ */
48
+ export interface InstructionTemplate {
49
+ /** Template identifier */
50
+ id: string;
51
+ /** SHA-256 hash of the template */
52
+ hash: string;
53
+ /** Human-readable description */
54
+ description: string;
55
+ /** JSON Schema for allowed parameters */
56
+ parameterSchema: object;
57
+ }
58
+ export declare const InstructionTemplateSchema: z.ZodObject<{
59
+ id: z.ZodString;
60
+ hash: z.ZodString;
61
+ description: z.ZodString;
62
+ parameterSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
63
+ }, "strip", z.ZodTypeAny, {
64
+ id?: string;
65
+ description?: string;
66
+ hash?: string;
67
+ parameterSchema?: Record<string, unknown>;
68
+ }, {
69
+ id?: string;
70
+ description?: string;
71
+ hash?: string;
72
+ parameterSchema?: Record<string, unknown>;
73
+ }>;
74
+ /**
75
+ * Instruction source configuration
76
+ */
77
+ export interface InstructionSource {
78
+ /** Allowed source DIDs or identifiers */
79
+ allowedSources: string[];
80
+ /** Whether signature verification is required */
81
+ requireSignature: boolean;
82
+ }
83
+ export declare const InstructionSourceSchema: z.ZodObject<{
84
+ allowedSources: z.ZodArray<z.ZodString, "many">;
85
+ requireSignature: z.ZodBoolean;
86
+ }, "strip", z.ZodTypeAny, {
87
+ allowedSources?: string[];
88
+ requireSignature?: boolean;
89
+ }, {
90
+ allowedSources?: string[];
91
+ requireSignature?: boolean;
92
+ }>;
93
+ /**
94
+ * Instruction integrity configuration
95
+ * Binds an agent to approved system prompts
96
+ */
97
+ export interface InstructionIntegrity {
98
+ /** SHA-256 hashes of allowed system prompts */
99
+ allowedInstructionHashes: string[];
100
+ /** Instruction templates with parameter schemas */
101
+ instructionTemplates: InstructionTemplate[];
102
+ /** Allowed instruction sources */
103
+ instructionSource: InstructionSource;
104
+ }
105
+ export declare const InstructionIntegritySchema: z.ZodObject<{
106
+ allowedInstructionHashes: z.ZodArray<z.ZodString, "many">;
107
+ instructionTemplates: z.ZodArray<z.ZodObject<{
108
+ id: z.ZodString;
109
+ hash: z.ZodString;
110
+ description: z.ZodString;
111
+ parameterSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
112
+ }, "strip", z.ZodTypeAny, {
113
+ id?: string;
114
+ description?: string;
115
+ hash?: string;
116
+ parameterSchema?: Record<string, unknown>;
117
+ }, {
118
+ id?: string;
119
+ description?: string;
120
+ hash?: string;
121
+ parameterSchema?: Record<string, unknown>;
122
+ }>, "many">;
123
+ instructionSource: z.ZodObject<{
124
+ allowedSources: z.ZodArray<z.ZodString, "many">;
125
+ requireSignature: z.ZodBoolean;
126
+ }, "strip", z.ZodTypeAny, {
127
+ allowedSources?: string[];
128
+ requireSignature?: boolean;
129
+ }, {
130
+ allowedSources?: string[];
131
+ requireSignature?: boolean;
132
+ }>;
133
+ }, "strip", z.ZodTypeAny, {
134
+ allowedInstructionHashes?: string[];
135
+ instructionTemplates?: {
136
+ id?: string;
137
+ description?: string;
138
+ hash?: string;
139
+ parameterSchema?: Record<string, unknown>;
140
+ }[];
141
+ instructionSource?: {
142
+ allowedSources?: string[];
143
+ requireSignature?: boolean;
144
+ };
145
+ }, {
146
+ allowedInstructionHashes?: string[];
147
+ instructionTemplates?: {
148
+ id?: string;
149
+ description?: string;
150
+ hash?: string;
151
+ parameterSchema?: Record<string, unknown>;
152
+ }[];
153
+ instructionSource?: {
154
+ allowedSources?: string[];
155
+ requireSignature?: boolean;
156
+ };
157
+ }>;
158
+ /**
159
+ * Result of instruction validation
160
+ */
161
+ export interface InstructionValidationResult {
162
+ /** Whether instruction is valid */
163
+ valid: boolean;
164
+ /** Validation method used */
165
+ method?: 'exact-match' | 'template-match' | 'signed-source';
166
+ /** Template ID if template-matched */
167
+ templateId?: string;
168
+ /** Reason for rejection */
169
+ reason?: string;
170
+ /** SHA-256 hash of the instruction */
171
+ instructionHash?: string;
172
+ /** Extracted parameters if template-matched */
173
+ extractedParams?: Record<string, unknown>;
174
+ }
175
+ export declare const InstructionValidationResultSchema: z.ZodObject<{
176
+ valid: z.ZodBoolean;
177
+ method: z.ZodOptional<z.ZodEnum<["exact-match", "template-match", "signed-source"]>>;
178
+ templateId: z.ZodOptional<z.ZodString>;
179
+ reason: z.ZodOptional<z.ZodString>;
180
+ instructionHash: z.ZodOptional<z.ZodString>;
181
+ extractedParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
182
+ }, "strip", z.ZodTypeAny, {
183
+ valid?: boolean;
184
+ method?: "exact-match" | "template-match" | "signed-source";
185
+ reason?: string;
186
+ templateId?: string;
187
+ instructionHash?: string;
188
+ extractedParams?: Record<string, unknown>;
189
+ }, {
190
+ valid?: boolean;
191
+ method?: "exact-match" | "template-match" | "signed-source";
192
+ reason?: string;
193
+ templateId?: string;
194
+ instructionHash?: string;
195
+ extractedParams?: Record<string, unknown>;
196
+ }>;
197
+ /**
198
+ * Template match result
199
+ */
200
+ export interface TemplateMatchResult {
201
+ /** Whether the template matched */
202
+ matches: boolean;
203
+ /** Template ID if matched */
204
+ templateId?: string;
205
+ /** Extracted parameters */
206
+ extractedParams?: Record<string, unknown>;
207
+ /** Match confidence score (0-1) */
208
+ confidence?: number;
209
+ }
210
+ export declare const TemplateMatchResultSchema: z.ZodObject<{
211
+ matches: z.ZodBoolean;
212
+ templateId: z.ZodOptional<z.ZodString>;
213
+ extractedParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
214
+ confidence: z.ZodOptional<z.ZodNumber>;
215
+ }, "strip", z.ZodTypeAny, {
216
+ matches?: boolean;
217
+ confidence?: number;
218
+ templateId?: string;
219
+ extractedParams?: Record<string, unknown>;
220
+ }, {
221
+ matches?: boolean;
222
+ confidence?: number;
223
+ templateId?: string;
224
+ extractedParams?: Record<string, unknown>;
225
+ }>;
226
+ /**
227
+ * Output schema definition
228
+ */
229
+ export interface OutputSchema {
230
+ /** Schema identifier */
231
+ id: string;
232
+ /** Human-readable description */
233
+ description: string;
234
+ /** JSON Schema for output validation */
235
+ jsonSchema: object;
236
+ }
237
+ export declare const OutputSchemaSchema: z.ZodObject<{
238
+ id: z.ZodString;
239
+ description: z.ZodString;
240
+ jsonSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
241
+ }, "strip", z.ZodTypeAny, {
242
+ id?: string;
243
+ description?: string;
244
+ jsonSchema?: Record<string, unknown>;
245
+ }, {
246
+ id?: string;
247
+ description?: string;
248
+ jsonSchema?: Record<string, unknown>;
249
+ }>;
250
+ /**
251
+ * Prohibited pattern definition
252
+ */
253
+ export interface ProhibitedPattern {
254
+ /** Pattern type */
255
+ type: 'regex' | 'keyword' | 'semantic';
256
+ /** Pattern value (regex string, keyword, or semantic description) */
257
+ pattern: string;
258
+ /** Human-readable description */
259
+ description: string;
260
+ /** Severity level */
261
+ severity?: 'low' | 'medium' | 'high' | 'critical';
262
+ }
263
+ export declare const ProhibitedPatternSchema: z.ZodObject<{
264
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
265
+ pattern: z.ZodString;
266
+ description: z.ZodString;
267
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
268
+ }, "strip", z.ZodTypeAny, {
269
+ type?: "regex" | "keyword" | "semantic";
270
+ pattern?: string;
271
+ description?: string;
272
+ severity?: "low" | "medium" | "high" | "critical";
273
+ }, {
274
+ type?: "regex" | "keyword" | "semantic";
275
+ pattern?: string;
276
+ description?: string;
277
+ severity?: "low" | "medium" | "high" | "critical";
278
+ }>;
279
+ /**
280
+ * Output schema binding configuration
281
+ * Constrains what an agent can produce as output
282
+ */
283
+ export interface OutputBinding {
284
+ /** Allowed output schemas */
285
+ allowedSchemas: OutputSchema[];
286
+ /** Prohibited patterns (e.g., PII, credentials) */
287
+ prohibitedPatterns: ProhibitedPattern[];
288
+ /** Allowed external endpoints (glob patterns) */
289
+ allowedExternalEndpoints: string[];
290
+ /** Blocked external endpoints (glob patterns) */
291
+ blockedExternalEndpoints: string[];
292
+ }
293
+ export declare const OutputBindingSchema: z.ZodObject<{
294
+ allowedSchemas: z.ZodArray<z.ZodObject<{
295
+ id: z.ZodString;
296
+ description: z.ZodString;
297
+ jsonSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
298
+ }, "strip", z.ZodTypeAny, {
299
+ id?: string;
300
+ description?: string;
301
+ jsonSchema?: Record<string, unknown>;
302
+ }, {
303
+ id?: string;
304
+ description?: string;
305
+ jsonSchema?: Record<string, unknown>;
306
+ }>, "many">;
307
+ prohibitedPatterns: z.ZodArray<z.ZodObject<{
308
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
309
+ pattern: z.ZodString;
310
+ description: z.ZodString;
311
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
312
+ }, "strip", z.ZodTypeAny, {
313
+ type?: "regex" | "keyword" | "semantic";
314
+ pattern?: string;
315
+ description?: string;
316
+ severity?: "low" | "medium" | "high" | "critical";
317
+ }, {
318
+ type?: "regex" | "keyword" | "semantic";
319
+ pattern?: string;
320
+ description?: string;
321
+ severity?: "low" | "medium" | "high" | "critical";
322
+ }>, "many">;
323
+ allowedExternalEndpoints: z.ZodArray<z.ZodString, "many">;
324
+ blockedExternalEndpoints: z.ZodArray<z.ZodString, "many">;
325
+ }, "strip", z.ZodTypeAny, {
326
+ allowedSchemas?: {
327
+ id?: string;
328
+ description?: string;
329
+ jsonSchema?: Record<string, unknown>;
330
+ }[];
331
+ prohibitedPatterns?: {
332
+ type?: "regex" | "keyword" | "semantic";
333
+ pattern?: string;
334
+ description?: string;
335
+ severity?: "low" | "medium" | "high" | "critical";
336
+ }[];
337
+ allowedExternalEndpoints?: string[];
338
+ blockedExternalEndpoints?: string[];
339
+ }, {
340
+ allowedSchemas?: {
341
+ id?: string;
342
+ description?: string;
343
+ jsonSchema?: Record<string, unknown>;
344
+ }[];
345
+ prohibitedPatterns?: {
346
+ type?: "regex" | "keyword" | "semantic";
347
+ pattern?: string;
348
+ description?: string;
349
+ severity?: "low" | "medium" | "high" | "critical";
350
+ }[];
351
+ allowedExternalEndpoints?: string[];
352
+ blockedExternalEndpoints?: string[];
353
+ }>;
354
+ /**
355
+ * Pattern scan result
356
+ */
357
+ export interface PatternScanResult {
358
+ /** Whether prohibited patterns were detected */
359
+ detected: boolean;
360
+ /** List of detected patterns */
361
+ patterns: Array<{
362
+ type: 'regex' | 'keyword' | 'semantic';
363
+ pattern: string;
364
+ description: string;
365
+ matches: string[];
366
+ severity?: 'low' | 'medium' | 'high' | 'critical';
367
+ }>;
368
+ /** Overall severity */
369
+ severity?: 'low' | 'medium' | 'high' | 'critical';
370
+ }
371
+ export declare const PatternScanResultSchema: z.ZodObject<{
372
+ detected: z.ZodBoolean;
373
+ patterns: z.ZodArray<z.ZodObject<{
374
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
375
+ pattern: z.ZodString;
376
+ description: z.ZodString;
377
+ matches: z.ZodArray<z.ZodString, "many">;
378
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
379
+ }, "strip", z.ZodTypeAny, {
380
+ type?: "regex" | "keyword" | "semantic";
381
+ pattern?: string;
382
+ description?: string;
383
+ severity?: "low" | "medium" | "high" | "critical";
384
+ matches?: string[];
385
+ }, {
386
+ type?: "regex" | "keyword" | "semantic";
387
+ pattern?: string;
388
+ description?: string;
389
+ severity?: "low" | "medium" | "high" | "critical";
390
+ matches?: string[];
391
+ }>, "many">;
392
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
393
+ }, "strip", z.ZodTypeAny, {
394
+ severity?: "low" | "medium" | "high" | "critical";
395
+ detected?: boolean;
396
+ patterns?: {
397
+ type?: "regex" | "keyword" | "semantic";
398
+ pattern?: string;
399
+ description?: string;
400
+ severity?: "low" | "medium" | "high" | "critical";
401
+ matches?: string[];
402
+ }[];
403
+ }, {
404
+ severity?: "low" | "medium" | "high" | "critical";
405
+ detected?: boolean;
406
+ patterns?: {
407
+ type?: "regex" | "keyword" | "semantic";
408
+ pattern?: string;
409
+ description?: string;
410
+ severity?: "low" | "medium" | "high" | "critical";
411
+ matches?: string[];
412
+ }[];
413
+ }>;
414
+ /**
415
+ * Output validation result
416
+ */
417
+ export interface OutputValidationResult {
418
+ /** Whether output is valid */
419
+ valid: boolean;
420
+ /** Whether output was modified */
421
+ modified?: boolean;
422
+ /** Modified output (if applicable) */
423
+ output?: unknown;
424
+ /** Matched schema ID */
425
+ schemaId?: string;
426
+ /** Reason for rejection */
427
+ reason?: string;
428
+ /** Pattern scan results */
429
+ patternScan?: PatternScanResult;
430
+ }
431
+ export declare const OutputValidationResultSchema: z.ZodObject<{
432
+ valid: z.ZodBoolean;
433
+ modified: z.ZodOptional<z.ZodBoolean>;
434
+ output: z.ZodOptional<z.ZodUnknown>;
435
+ schemaId: z.ZodOptional<z.ZodString>;
436
+ reason: z.ZodOptional<z.ZodString>;
437
+ patternScan: z.ZodOptional<z.ZodObject<{
438
+ detected: z.ZodBoolean;
439
+ patterns: z.ZodArray<z.ZodObject<{
440
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
441
+ pattern: z.ZodString;
442
+ description: z.ZodString;
443
+ matches: z.ZodArray<z.ZodString, "many">;
444
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
445
+ }, "strip", z.ZodTypeAny, {
446
+ type?: "regex" | "keyword" | "semantic";
447
+ pattern?: string;
448
+ description?: string;
449
+ severity?: "low" | "medium" | "high" | "critical";
450
+ matches?: string[];
451
+ }, {
452
+ type?: "regex" | "keyword" | "semantic";
453
+ pattern?: string;
454
+ description?: string;
455
+ severity?: "low" | "medium" | "high" | "critical";
456
+ matches?: string[];
457
+ }>, "many">;
458
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
459
+ }, "strip", z.ZodTypeAny, {
460
+ severity?: "low" | "medium" | "high" | "critical";
461
+ detected?: boolean;
462
+ patterns?: {
463
+ type?: "regex" | "keyword" | "semantic";
464
+ pattern?: string;
465
+ description?: string;
466
+ severity?: "low" | "medium" | "high" | "critical";
467
+ matches?: string[];
468
+ }[];
469
+ }, {
470
+ severity?: "low" | "medium" | "high" | "critical";
471
+ detected?: boolean;
472
+ patterns?: {
473
+ type?: "regex" | "keyword" | "semantic";
474
+ pattern?: string;
475
+ description?: string;
476
+ severity?: "low" | "medium" | "high" | "critical";
477
+ matches?: string[];
478
+ }[];
479
+ }>>;
480
+ }, "strip", z.ZodTypeAny, {
481
+ valid?: boolean;
482
+ reason?: string;
483
+ output?: unknown;
484
+ modified?: boolean;
485
+ schemaId?: string;
486
+ patternScan?: {
487
+ severity?: "low" | "medium" | "high" | "critical";
488
+ detected?: boolean;
489
+ patterns?: {
490
+ type?: "regex" | "keyword" | "semantic";
491
+ pattern?: string;
492
+ description?: string;
493
+ severity?: "low" | "medium" | "high" | "critical";
494
+ matches?: string[];
495
+ }[];
496
+ };
497
+ }, {
498
+ valid?: boolean;
499
+ reason?: string;
500
+ output?: unknown;
501
+ modified?: boolean;
502
+ schemaId?: string;
503
+ patternScan?: {
504
+ severity?: "low" | "medium" | "high" | "critical";
505
+ detected?: boolean;
506
+ patterns?: {
507
+ type?: "regex" | "keyword" | "semantic";
508
+ pattern?: string;
509
+ description?: string;
510
+ severity?: "low" | "medium" | "high" | "critical";
511
+ matches?: string[];
512
+ }[];
513
+ };
514
+ }>;
515
+ /**
516
+ * Sanitized output result
517
+ */
518
+ export interface SanitizedOutput {
519
+ /** Sanitized content */
520
+ content: unknown;
521
+ /** Whether content was modified */
522
+ modified: boolean;
523
+ /** List of redactions made */
524
+ redactions: Array<{
525
+ type: string;
526
+ description: string;
527
+ count: number;
528
+ }>;
529
+ }
530
+ export declare const SanitizedOutputSchema: z.ZodObject<{
531
+ content: z.ZodUnknown;
532
+ modified: z.ZodBoolean;
533
+ redactions: z.ZodArray<z.ZodObject<{
534
+ type: z.ZodString;
535
+ description: z.ZodString;
536
+ count: z.ZodNumber;
537
+ }, "strip", z.ZodTypeAny, {
538
+ type?: string;
539
+ description?: string;
540
+ count?: number;
541
+ }, {
542
+ type?: string;
543
+ description?: string;
544
+ count?: number;
545
+ }>, "many">;
546
+ }, "strip", z.ZodTypeAny, {
547
+ content?: unknown;
548
+ modified?: boolean;
549
+ redactions?: {
550
+ type?: string;
551
+ description?: string;
552
+ count?: number;
553
+ }[];
554
+ }, {
555
+ content?: unknown;
556
+ modified?: boolean;
557
+ redactions?: {
558
+ type?: string;
559
+ description?: string;
560
+ count?: number;
561
+ }[];
562
+ }>;
563
+ /**
564
+ * Inference scope levels
565
+ */
566
+ export declare enum InferenceLevel {
567
+ /** No inference; raw data passthrough only */
568
+ NONE = 0,
569
+ /** Aggregates, counts, averages */
570
+ STATISTICAL = 1,
571
+ /** Named entity extraction */
572
+ ENTITY = 2,
573
+ /** Relationship inference */
574
+ RELATIONAL = 3,
575
+ /** Pattern prediction */
576
+ PREDICTIVE = 4,
577
+ /** Full inference capability */
578
+ UNRESTRICTED = 5
579
+ }
580
+ export declare const InferenceLevelSchema: z.ZodNativeEnum<typeof InferenceLevel>;
581
+ /**
582
+ * Inference level names for display
583
+ */
584
+ export declare const INFERENCE_LEVEL_NAMES: Record<InferenceLevel, string>;
585
+ /**
586
+ * Domain-specific inference override
587
+ */
588
+ export interface DomainInferenceOverride {
589
+ /** Domain code */
590
+ domain: DomainCode;
591
+ /** Override level */
592
+ level: InferenceLevel;
593
+ /** Reason for override */
594
+ reason: string;
595
+ }
596
+ export declare const DomainInferenceOverrideSchema: z.ZodObject<{
597
+ domain: z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>;
598
+ level: z.ZodNativeEnum<typeof InferenceLevel>;
599
+ reason: z.ZodString;
600
+ }, "strip", z.ZodTypeAny, {
601
+ level?: InferenceLevel;
602
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
603
+ reason?: string;
604
+ }, {
605
+ level?: InferenceLevel;
606
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
607
+ reason?: string;
608
+ }>;
609
+ /**
610
+ * Derived knowledge handling configuration
611
+ */
612
+ export interface DerivedKnowledgeHandling {
613
+ /** Retention policy */
614
+ retention: 'none' | 'session' | 'persistent';
615
+ /** Allowed recipients (DIDs or identifiers) */
616
+ allowedRecipients: string[];
617
+ /** Whether cross-context sharing is allowed */
618
+ crossContextSharing: boolean;
619
+ }
620
+ export declare const DerivedKnowledgeHandlingSchema: z.ZodObject<{
621
+ retention: z.ZodEnum<["none", "session", "persistent"]>;
622
+ allowedRecipients: z.ZodArray<z.ZodString, "many">;
623
+ crossContextSharing: z.ZodBoolean;
624
+ }, "strip", z.ZodTypeAny, {
625
+ retention?: "none" | "session" | "persistent";
626
+ allowedRecipients?: string[];
627
+ crossContextSharing?: boolean;
628
+ }, {
629
+ retention?: "none" | "session" | "persistent";
630
+ allowedRecipients?: string[];
631
+ crossContextSharing?: boolean;
632
+ }>;
633
+ /**
634
+ * PII inference configuration
635
+ */
636
+ export interface PIIInferenceConfig {
637
+ /** Whether PII inference is allowed */
638
+ allowed: boolean;
639
+ /** How to handle PII if not allowed */
640
+ handling: 'block' | 'redact' | 'hash';
641
+ }
642
+ export declare const PIIInferenceConfigSchema: z.ZodObject<{
643
+ allowed: z.ZodBoolean;
644
+ handling: z.ZodEnum<["block", "redact", "hash"]>;
645
+ }, "strip", z.ZodTypeAny, {
646
+ allowed?: boolean;
647
+ handling?: "block" | "hash" | "redact";
648
+ }, {
649
+ allowed?: boolean;
650
+ handling?: "block" | "hash" | "redact";
651
+ }>;
652
+ /**
653
+ * Inference scope configuration
654
+ * Controls what can be derived from accessed data
655
+ */
656
+ export interface InferenceScope {
657
+ /** Global inference level limit */
658
+ globalLevel: InferenceLevel;
659
+ /** Domain-specific overrides */
660
+ domainOverrides: DomainInferenceOverride[];
661
+ /** How to handle derived knowledge */
662
+ derivedKnowledgeHandling: DerivedKnowledgeHandling;
663
+ /** PII inference controls */
664
+ piiInference: PIIInferenceConfig;
665
+ }
666
+ export declare const InferenceScopeSchema: z.ZodObject<{
667
+ globalLevel: z.ZodNativeEnum<typeof InferenceLevel>;
668
+ domainOverrides: z.ZodArray<z.ZodObject<{
669
+ domain: z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>;
670
+ level: z.ZodNativeEnum<typeof InferenceLevel>;
671
+ reason: z.ZodString;
672
+ }, "strip", z.ZodTypeAny, {
673
+ level?: InferenceLevel;
674
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
675
+ reason?: string;
676
+ }, {
677
+ level?: InferenceLevel;
678
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
679
+ reason?: string;
680
+ }>, "many">;
681
+ derivedKnowledgeHandling: z.ZodObject<{
682
+ retention: z.ZodEnum<["none", "session", "persistent"]>;
683
+ allowedRecipients: z.ZodArray<z.ZodString, "many">;
684
+ crossContextSharing: z.ZodBoolean;
685
+ }, "strip", z.ZodTypeAny, {
686
+ retention?: "none" | "session" | "persistent";
687
+ allowedRecipients?: string[];
688
+ crossContextSharing?: boolean;
689
+ }, {
690
+ retention?: "none" | "session" | "persistent";
691
+ allowedRecipients?: string[];
692
+ crossContextSharing?: boolean;
693
+ }>;
694
+ piiInference: z.ZodObject<{
695
+ allowed: z.ZodBoolean;
696
+ handling: z.ZodEnum<["block", "redact", "hash"]>;
697
+ }, "strip", z.ZodTypeAny, {
698
+ allowed?: boolean;
699
+ handling?: "block" | "hash" | "redact";
700
+ }, {
701
+ allowed?: boolean;
702
+ handling?: "block" | "hash" | "redact";
703
+ }>;
704
+ }, "strip", z.ZodTypeAny, {
705
+ globalLevel?: InferenceLevel;
706
+ domainOverrides?: {
707
+ level?: InferenceLevel;
708
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
709
+ reason?: string;
710
+ }[];
711
+ derivedKnowledgeHandling?: {
712
+ retention?: "none" | "session" | "persistent";
713
+ allowedRecipients?: string[];
714
+ crossContextSharing?: boolean;
715
+ };
716
+ piiInference?: {
717
+ allowed?: boolean;
718
+ handling?: "block" | "hash" | "redact";
719
+ };
720
+ }, {
721
+ globalLevel?: InferenceLevel;
722
+ domainOverrides?: {
723
+ level?: InferenceLevel;
724
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
725
+ reason?: string;
726
+ }[];
727
+ derivedKnowledgeHandling?: {
728
+ retention?: "none" | "session" | "persistent";
729
+ allowedRecipients?: string[];
730
+ crossContextSharing?: boolean;
731
+ };
732
+ piiInference?: {
733
+ allowed?: boolean;
734
+ handling?: "block" | "hash" | "redact";
735
+ };
736
+ }>;
737
+ /**
738
+ * Inference operation types
739
+ */
740
+ export type InferenceOperationType = 'aggregate' | 'count' | 'average' | 'entity-extraction' | 'relationship-inference' | 'pattern-prediction' | 'sentiment-analysis' | 'classification' | 'summarization' | 'custom';
741
+ export declare const InferenceOperationTypeSchema: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
742
+ /**
743
+ * Inference operation definition
744
+ */
745
+ export interface InferenceOperation {
746
+ /** Operation type */
747
+ type: InferenceOperationType;
748
+ /** Source domains */
749
+ sourceDomains: DomainCode[];
750
+ /** Description of the inference */
751
+ description?: string;
752
+ /** Custom inference level requirement (for custom operations) */
753
+ customLevel?: InferenceLevel;
754
+ }
755
+ export declare const InferenceOperationSchema: z.ZodObject<{
756
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
757
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
758
+ description: z.ZodOptional<z.ZodString>;
759
+ customLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
760
+ }, "strip", z.ZodTypeAny, {
761
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
762
+ description?: string;
763
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
764
+ customLevel?: InferenceLevel;
765
+ }, {
766
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
767
+ description?: string;
768
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
769
+ customLevel?: InferenceLevel;
770
+ }>;
771
+ /**
772
+ * Derived knowledge representation
773
+ */
774
+ export interface DerivedKnowledge {
775
+ /** Unique identifier */
776
+ id: string;
777
+ /** Type of knowledge */
778
+ type: InferenceOperationType;
779
+ /** Source data identifiers */
780
+ sourceIds: string[];
781
+ /** Source domains */
782
+ sourceDomains: DomainCode[];
783
+ /** The derived content */
784
+ content: unknown;
785
+ /** Creation timestamp */
786
+ createdAt: Date;
787
+ /** Inference level used */
788
+ inferenceLevel: InferenceLevel;
789
+ }
790
+ export declare const DerivedKnowledgeSchema: z.ZodObject<{
791
+ id: z.ZodString;
792
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
793
+ sourceIds: z.ZodArray<z.ZodString, "many">;
794
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
795
+ content: z.ZodUnknown;
796
+ createdAt: z.ZodDate;
797
+ inferenceLevel: z.ZodNativeEnum<typeof InferenceLevel>;
798
+ }, "strip", z.ZodTypeAny, {
799
+ id?: string;
800
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
801
+ createdAt?: Date;
802
+ content?: unknown;
803
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
804
+ sourceIds?: string[];
805
+ inferenceLevel?: InferenceLevel;
806
+ }, {
807
+ id?: string;
808
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
809
+ createdAt?: Date;
810
+ content?: unknown;
811
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
812
+ sourceIds?: string[];
813
+ inferenceLevel?: InferenceLevel;
814
+ }>;
815
+ /**
816
+ * Inference validation result
817
+ */
818
+ export interface InferenceValidationResult {
819
+ /** Whether inference is valid */
820
+ valid: boolean;
821
+ /** Reason for rejection */
822
+ reason?: string;
823
+ /** Required level */
824
+ requiredLevel?: InferenceLevel;
825
+ /** Agent's effective level */
826
+ agentLevel?: InferenceLevel;
827
+ /** Domain that caused restriction */
828
+ restrictedDomain?: DomainCode;
829
+ }
830
+ export declare const InferenceValidationResultSchema: z.ZodObject<{
831
+ valid: z.ZodBoolean;
832
+ reason: z.ZodOptional<z.ZodString>;
833
+ requiredLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
834
+ agentLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
835
+ restrictedDomain: z.ZodOptional<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>>;
836
+ }, "strip", z.ZodTypeAny, {
837
+ valid?: boolean;
838
+ reason?: string;
839
+ requiredLevel?: InferenceLevel;
840
+ agentLevel?: InferenceLevel;
841
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
842
+ }, {
843
+ valid?: boolean;
844
+ reason?: string;
845
+ requiredLevel?: InferenceLevel;
846
+ agentLevel?: InferenceLevel;
847
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
848
+ }>;
849
+ /**
850
+ * Handling result for derived knowledge
851
+ */
852
+ export interface HandlingResult {
853
+ /** Action taken */
854
+ action: 'stored' | 'discarded' | 'shared' | 'redacted';
855
+ /** Reason for action */
856
+ reason: string;
857
+ /** Modified knowledge (if redacted) */
858
+ modifiedKnowledge?: DerivedKnowledge;
859
+ }
860
+ export declare const HandlingResultSchema: z.ZodObject<{
861
+ action: z.ZodEnum<["stored", "discarded", "shared", "redacted"]>;
862
+ reason: z.ZodString;
863
+ modifiedKnowledge: z.ZodOptional<z.ZodObject<{
864
+ id: z.ZodString;
865
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
866
+ sourceIds: z.ZodArray<z.ZodString, "many">;
867
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
868
+ content: z.ZodUnknown;
869
+ createdAt: z.ZodDate;
870
+ inferenceLevel: z.ZodNativeEnum<typeof InferenceLevel>;
871
+ }, "strip", z.ZodTypeAny, {
872
+ id?: string;
873
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
874
+ createdAt?: Date;
875
+ content?: unknown;
876
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
877
+ sourceIds?: string[];
878
+ inferenceLevel?: InferenceLevel;
879
+ }, {
880
+ id?: string;
881
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
882
+ createdAt?: Date;
883
+ content?: unknown;
884
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
885
+ sourceIds?: string[];
886
+ inferenceLevel?: InferenceLevel;
887
+ }>>;
888
+ }, "strip", z.ZodTypeAny, {
889
+ reason?: string;
890
+ action?: "stored" | "redacted" | "discarded" | "shared";
891
+ modifiedKnowledge?: {
892
+ id?: string;
893
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
894
+ createdAt?: Date;
895
+ content?: unknown;
896
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
897
+ sourceIds?: string[];
898
+ inferenceLevel?: InferenceLevel;
899
+ };
900
+ }, {
901
+ reason?: string;
902
+ action?: "stored" | "redacted" | "discarded" | "shared";
903
+ modifiedKnowledge?: {
904
+ id?: string;
905
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
906
+ createdAt?: Date;
907
+ content?: unknown;
908
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
909
+ sourceIds?: string[];
910
+ inferenceLevel?: InferenceLevel;
911
+ };
912
+ }>;
913
+ /**
914
+ * PII check result
915
+ */
916
+ export interface PIICheckResult {
917
+ /** Whether PII was detected */
918
+ containsPII: boolean;
919
+ /** Types of PII detected */
920
+ piiTypes: string[];
921
+ /** Action taken */
922
+ action: 'allowed' | 'blocked' | 'redacted' | 'hashed';
923
+ /** Modified data (if redacted or hashed) */
924
+ modifiedData?: unknown;
925
+ }
926
+ export declare const PIICheckResultSchema: z.ZodObject<{
927
+ containsPII: z.ZodBoolean;
928
+ piiTypes: z.ZodArray<z.ZodString, "many">;
929
+ action: z.ZodEnum<["allowed", "blocked", "redacted", "hashed"]>;
930
+ modifiedData: z.ZodOptional<z.ZodUnknown>;
931
+ }, "strip", z.ZodTypeAny, {
932
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
933
+ containsPII?: boolean;
934
+ piiTypes?: string[];
935
+ modifiedData?: unknown;
936
+ }, {
937
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
938
+ containsPII?: boolean;
939
+ piiTypes?: string[];
940
+ modifiedData?: unknown;
941
+ }>;
942
+ /**
943
+ * Content integrity requirements
944
+ */
945
+ export interface ContentIntegrity {
946
+ /** Whether signature is required */
947
+ signatureRequired: boolean;
948
+ /** Maximum age in seconds */
949
+ maxAge: number;
950
+ /** Allowed content formats */
951
+ allowedFormats: string[];
952
+ }
953
+ export declare const ContentIntegritySchema: z.ZodObject<{
954
+ signatureRequired: z.ZodBoolean;
955
+ maxAge: z.ZodNumber;
956
+ allowedFormats: z.ZodArray<z.ZodString, "many">;
957
+ }, "strip", z.ZodTypeAny, {
958
+ maxAge?: number;
959
+ signatureRequired?: boolean;
960
+ allowedFormats?: string[];
961
+ }, {
962
+ maxAge?: number;
963
+ signatureRequired?: boolean;
964
+ allowedFormats?: string[];
965
+ }>;
966
+ /**
967
+ * Context provider authentication requirements
968
+ */
969
+ export interface ContextAuthenticationRequirements {
970
+ /** Whether authentication is required */
971
+ required: boolean;
972
+ /** Minimum trust tier for providers */
973
+ minTrustTier: TrustTier;
974
+ /** Required domains for providers */
975
+ requiredDomains?: DomainCode[];
976
+ /** Allowed provider DIDs */
977
+ allowedProviders: string[];
978
+ /** Blocked provider DIDs */
979
+ blockedProviders: string[];
980
+ /** Content integrity requirements */
981
+ contentIntegrity: ContentIntegrity;
982
+ }
983
+ export declare const ContextAuthenticationRequirementsSchema: z.ZodObject<{
984
+ required: z.ZodBoolean;
985
+ minTrustTier: z.ZodNativeEnum<typeof TrustTier>;
986
+ requiredDomains: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>;
987
+ allowedProviders: z.ZodArray<z.ZodString, "many">;
988
+ blockedProviders: z.ZodArray<z.ZodString, "many">;
989
+ contentIntegrity: z.ZodObject<{
990
+ signatureRequired: z.ZodBoolean;
991
+ maxAge: z.ZodNumber;
992
+ allowedFormats: z.ZodArray<z.ZodString, "many">;
993
+ }, "strip", z.ZodTypeAny, {
994
+ maxAge?: number;
995
+ signatureRequired?: boolean;
996
+ allowedFormats?: string[];
997
+ }, {
998
+ maxAge?: number;
999
+ signatureRequired?: boolean;
1000
+ allowedFormats?: string[];
1001
+ }>;
1002
+ }, "strip", z.ZodTypeAny, {
1003
+ required?: boolean;
1004
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1005
+ minTrustTier?: TrustTier;
1006
+ allowedProviders?: string[];
1007
+ blockedProviders?: string[];
1008
+ contentIntegrity?: {
1009
+ maxAge?: number;
1010
+ signatureRequired?: boolean;
1011
+ allowedFormats?: string[];
1012
+ };
1013
+ }, {
1014
+ required?: boolean;
1015
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1016
+ minTrustTier?: TrustTier;
1017
+ allowedProviders?: string[];
1018
+ blockedProviders?: string[];
1019
+ contentIntegrity?: {
1020
+ maxAge?: number;
1021
+ signatureRequired?: boolean;
1022
+ allowedFormats?: string[];
1023
+ };
1024
+ }>;
1025
+ /**
1026
+ * Trust profile for context providers
1027
+ */
1028
+ export interface TrustProfile {
1029
+ /** Provider DID */
1030
+ did: string;
1031
+ /** Trust tier */
1032
+ trustTier: TrustTier;
1033
+ /** Capability domains */
1034
+ domains: DomainCode[];
1035
+ /** Trust score (0-1000) */
1036
+ trustScore: number;
1037
+ /** Attestations */
1038
+ attestations?: string[];
1039
+ }
1040
+ export declare const TrustProfileSchema: z.ZodObject<{
1041
+ did: z.ZodString;
1042
+ trustTier: z.ZodNativeEnum<typeof TrustTier>;
1043
+ domains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
1044
+ trustScore: z.ZodNumber;
1045
+ attestations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1046
+ }, "strip", z.ZodTypeAny, {
1047
+ trustScore?: number;
1048
+ did?: string;
1049
+ trustTier?: TrustTier;
1050
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1051
+ attestations?: string[];
1052
+ }, {
1053
+ trustScore?: number;
1054
+ did?: string;
1055
+ trustTier?: TrustTier;
1056
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1057
+ attestations?: string[];
1058
+ }>;
1059
+ /**
1060
+ * Provider validation result
1061
+ */
1062
+ export interface ProviderValidationResult {
1063
+ /** Whether provider is valid */
1064
+ valid: boolean;
1065
+ /** Provider DID */
1066
+ providerId: string;
1067
+ /** Trust tier */
1068
+ trustTier?: TrustTier;
1069
+ /** Reason for rejection */
1070
+ reason?: string;
1071
+ /** Whether provider is on blocklist */
1072
+ blocked?: boolean;
1073
+ }
1074
+ export declare const ProviderValidationResultSchema: z.ZodObject<{
1075
+ valid: z.ZodBoolean;
1076
+ providerId: z.ZodString;
1077
+ trustTier: z.ZodOptional<z.ZodNativeEnum<typeof TrustTier>>;
1078
+ reason: z.ZodOptional<z.ZodString>;
1079
+ blocked: z.ZodOptional<z.ZodBoolean>;
1080
+ }, "strip", z.ZodTypeAny, {
1081
+ valid?: boolean;
1082
+ providerId?: string;
1083
+ reason?: string;
1084
+ blocked?: boolean;
1085
+ trustTier?: TrustTier;
1086
+ }, {
1087
+ valid?: boolean;
1088
+ providerId?: string;
1089
+ reason?: string;
1090
+ blocked?: boolean;
1091
+ trustTier?: TrustTier;
1092
+ }>;
1093
+ /**
1094
+ * Content validation result
1095
+ */
1096
+ export interface ContentValidationResult {
1097
+ /** Whether content is valid */
1098
+ valid: boolean;
1099
+ /** Signature verification status */
1100
+ signatureValid?: boolean;
1101
+ /** Content age in seconds */
1102
+ ageSeconds?: number;
1103
+ /** Content format */
1104
+ format?: string;
1105
+ /** Reason for rejection */
1106
+ reason?: string;
1107
+ }
1108
+ export declare const ContentValidationResultSchema: z.ZodObject<{
1109
+ valid: z.ZodBoolean;
1110
+ signatureValid: z.ZodOptional<z.ZodBoolean>;
1111
+ ageSeconds: z.ZodOptional<z.ZodNumber>;
1112
+ format: z.ZodOptional<z.ZodString>;
1113
+ reason: z.ZodOptional<z.ZodString>;
1114
+ }, "strip", z.ZodTypeAny, {
1115
+ valid?: boolean;
1116
+ reason?: string;
1117
+ format?: string;
1118
+ signatureValid?: boolean;
1119
+ ageSeconds?: number;
1120
+ }, {
1121
+ valid?: boolean;
1122
+ reason?: string;
1123
+ format?: string;
1124
+ signatureValid?: boolean;
1125
+ ageSeconds?: number;
1126
+ }>;
1127
+ /**
1128
+ * Injection scan result
1129
+ */
1130
+ export interface InjectionScanResult {
1131
+ /** Whether injection patterns were detected */
1132
+ detected: boolean;
1133
+ /** Detected patterns */
1134
+ patterns: string[];
1135
+ /** Severity level */
1136
+ severity?: 'low' | 'medium' | 'high' | 'critical';
1137
+ /** Matched pattern descriptions */
1138
+ descriptions?: string[];
1139
+ }
1140
+ export declare const InjectionScanResultSchema: z.ZodObject<{
1141
+ detected: z.ZodBoolean;
1142
+ patterns: z.ZodArray<z.ZodString, "many">;
1143
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
1144
+ descriptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1145
+ }, "strip", z.ZodTypeAny, {
1146
+ severity?: "low" | "medium" | "high" | "critical";
1147
+ detected?: boolean;
1148
+ patterns?: string[];
1149
+ descriptions?: string[];
1150
+ }, {
1151
+ severity?: "low" | "medium" | "high" | "critical";
1152
+ detected?: boolean;
1153
+ patterns?: string[];
1154
+ descriptions?: string[];
1155
+ }>;
1156
+ /**
1157
+ * Context validation result
1158
+ */
1159
+ export interface ContextValidationResult {
1160
+ /** Whether context is valid */
1161
+ valid: boolean;
1162
+ /** Reason for rejection */
1163
+ reason?: string;
1164
+ /** Provider validation result */
1165
+ providerValidation?: ProviderValidationResult;
1166
+ /** Content validation result */
1167
+ contentValidation?: ContentValidationResult;
1168
+ /** Injection scan results */
1169
+ injectionScan?: InjectionScanResult;
1170
+ }
1171
+ export declare const ContextValidationResultSchema: z.ZodObject<{
1172
+ valid: z.ZodBoolean;
1173
+ reason: z.ZodOptional<z.ZodString>;
1174
+ providerValidation: z.ZodOptional<z.ZodObject<{
1175
+ valid: z.ZodBoolean;
1176
+ providerId: z.ZodString;
1177
+ trustTier: z.ZodOptional<z.ZodNativeEnum<typeof TrustTier>>;
1178
+ reason: z.ZodOptional<z.ZodString>;
1179
+ blocked: z.ZodOptional<z.ZodBoolean>;
1180
+ }, "strip", z.ZodTypeAny, {
1181
+ valid?: boolean;
1182
+ providerId?: string;
1183
+ reason?: string;
1184
+ blocked?: boolean;
1185
+ trustTier?: TrustTier;
1186
+ }, {
1187
+ valid?: boolean;
1188
+ providerId?: string;
1189
+ reason?: string;
1190
+ blocked?: boolean;
1191
+ trustTier?: TrustTier;
1192
+ }>>;
1193
+ contentValidation: z.ZodOptional<z.ZodObject<{
1194
+ valid: z.ZodBoolean;
1195
+ signatureValid: z.ZodOptional<z.ZodBoolean>;
1196
+ ageSeconds: z.ZodOptional<z.ZodNumber>;
1197
+ format: z.ZodOptional<z.ZodString>;
1198
+ reason: z.ZodOptional<z.ZodString>;
1199
+ }, "strip", z.ZodTypeAny, {
1200
+ valid?: boolean;
1201
+ reason?: string;
1202
+ format?: string;
1203
+ signatureValid?: boolean;
1204
+ ageSeconds?: number;
1205
+ }, {
1206
+ valid?: boolean;
1207
+ reason?: string;
1208
+ format?: string;
1209
+ signatureValid?: boolean;
1210
+ ageSeconds?: number;
1211
+ }>>;
1212
+ injectionScan: z.ZodOptional<z.ZodObject<{
1213
+ detected: z.ZodBoolean;
1214
+ patterns: z.ZodArray<z.ZodString, "many">;
1215
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
1216
+ descriptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1217
+ }, "strip", z.ZodTypeAny, {
1218
+ severity?: "low" | "medium" | "high" | "critical";
1219
+ detected?: boolean;
1220
+ patterns?: string[];
1221
+ descriptions?: string[];
1222
+ }, {
1223
+ severity?: "low" | "medium" | "high" | "critical";
1224
+ detected?: boolean;
1225
+ patterns?: string[];
1226
+ descriptions?: string[];
1227
+ }>>;
1228
+ }, "strip", z.ZodTypeAny, {
1229
+ valid?: boolean;
1230
+ reason?: string;
1231
+ providerValidation?: {
1232
+ valid?: boolean;
1233
+ providerId?: string;
1234
+ reason?: string;
1235
+ blocked?: boolean;
1236
+ trustTier?: TrustTier;
1237
+ };
1238
+ contentValidation?: {
1239
+ valid?: boolean;
1240
+ reason?: string;
1241
+ format?: string;
1242
+ signatureValid?: boolean;
1243
+ ageSeconds?: number;
1244
+ };
1245
+ injectionScan?: {
1246
+ severity?: "low" | "medium" | "high" | "critical";
1247
+ detected?: boolean;
1248
+ patterns?: string[];
1249
+ descriptions?: string[];
1250
+ };
1251
+ }, {
1252
+ valid?: boolean;
1253
+ reason?: string;
1254
+ providerValidation?: {
1255
+ valid?: boolean;
1256
+ providerId?: string;
1257
+ reason?: string;
1258
+ blocked?: boolean;
1259
+ trustTier?: TrustTier;
1260
+ };
1261
+ contentValidation?: {
1262
+ valid?: boolean;
1263
+ reason?: string;
1264
+ format?: string;
1265
+ signatureValid?: boolean;
1266
+ ageSeconds?: number;
1267
+ };
1268
+ injectionScan?: {
1269
+ severity?: "low" | "medium" | "high" | "critical";
1270
+ detected?: boolean;
1271
+ patterns?: string[];
1272
+ descriptions?: string[];
1273
+ };
1274
+ }>;
1275
+ /**
1276
+ * Message channel classification
1277
+ */
1278
+ export type MessageChannel = 'control' | 'data';
1279
+ export declare const MessageChannelSchema: z.ZodEnum<["control", "data"]>;
1280
+ /**
1281
+ * Dual-channel authorization configuration
1282
+ */
1283
+ export interface DualChannelConfig {
1284
+ /** Whether dual-channel is enforced */
1285
+ enforced: boolean;
1286
+ /** Control plane sources */
1287
+ controlPlaneSources: string[];
1288
+ /** How to treat data plane content */
1289
+ dataPlaneTreatment: 'block' | 'sanitize' | 'warn';
1290
+ }
1291
+ export declare const DualChannelConfigSchema: z.ZodObject<{
1292
+ enforced: z.ZodBoolean;
1293
+ controlPlaneSources: z.ZodArray<z.ZodString, "many">;
1294
+ dataPlaneTreatment: z.ZodEnum<["block", "sanitize", "warn"]>;
1295
+ }, "strip", z.ZodTypeAny, {
1296
+ enforced?: boolean;
1297
+ controlPlaneSources?: string[];
1298
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1299
+ }, {
1300
+ enforced?: boolean;
1301
+ controlPlaneSources?: string[];
1302
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1303
+ }>;
1304
+ /**
1305
+ * Message classification result
1306
+ */
1307
+ export interface MessageClassification {
1308
+ /** Detected channel */
1309
+ channel: MessageChannel;
1310
+ /** Message source */
1311
+ source: string;
1312
+ /** Whether source is authenticated */
1313
+ authenticated: boolean;
1314
+ /** Whether instructions are allowed from this channel */
1315
+ instructionAllowed: boolean;
1316
+ /** Confidence in classification (0-1) */
1317
+ confidence?: number;
1318
+ }
1319
+ export declare const MessageClassificationSchema: z.ZodObject<{
1320
+ channel: z.ZodEnum<["control", "data"]>;
1321
+ source: z.ZodString;
1322
+ authenticated: z.ZodBoolean;
1323
+ instructionAllowed: z.ZodBoolean;
1324
+ confidence: z.ZodOptional<z.ZodNumber>;
1325
+ }, "strip", z.ZodTypeAny, {
1326
+ channel?: "data" | "control";
1327
+ source?: string;
1328
+ confidence?: number;
1329
+ authenticated?: boolean;
1330
+ instructionAllowed?: boolean;
1331
+ }, {
1332
+ channel?: "data" | "control";
1333
+ source?: string;
1334
+ confidence?: number;
1335
+ authenticated?: boolean;
1336
+ instructionAllowed?: boolean;
1337
+ }>;
1338
+ /**
1339
+ * Channel enforcement result
1340
+ */
1341
+ export interface EnforcementResult {
1342
+ /** Whether message is allowed to proceed */
1343
+ allowed: boolean;
1344
+ /** Action taken */
1345
+ action: 'pass' | 'block' | 'sanitize' | 'warn';
1346
+ /** Reason for action */
1347
+ reason?: string;
1348
+ /** Sanitized content (if applicable) */
1349
+ sanitizedContent?: string;
1350
+ /** Stripped instructions (for audit) */
1351
+ strippedInstructions?: string[];
1352
+ }
1353
+ export declare const EnforcementResultSchema: z.ZodObject<{
1354
+ allowed: z.ZodBoolean;
1355
+ action: z.ZodEnum<["pass", "block", "sanitize", "warn"]>;
1356
+ reason: z.ZodOptional<z.ZodString>;
1357
+ sanitizedContent: z.ZodOptional<z.ZodString>;
1358
+ strippedInstructions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1359
+ }, "strip", z.ZodTypeAny, {
1360
+ reason?: string;
1361
+ action?: "warn" | "block" | "pass" | "sanitize";
1362
+ allowed?: boolean;
1363
+ sanitizedContent?: string;
1364
+ strippedInstructions?: string[];
1365
+ }, {
1366
+ reason?: string;
1367
+ action?: "warn" | "block" | "pass" | "sanitize";
1368
+ allowed?: boolean;
1369
+ sanitizedContent?: string;
1370
+ strippedInstructions?: string[];
1371
+ }>;
1372
+ /**
1373
+ * Complete semantic governance credential
1374
+ * Combines all semantic governance controls into a single verifiable credential
1375
+ */
1376
+ export interface SemanticGovernanceCredential {
1377
+ /** Credential ID (typically the agent DID) */
1378
+ id: string;
1379
+ /** Full CAR ID string */
1380
+ carId: string;
1381
+ /** Instruction integrity rules */
1382
+ instructionIntegrity: InstructionIntegrity;
1383
+ /** Output binding rules */
1384
+ outputBinding: OutputBinding;
1385
+ /** Inference scope rules */
1386
+ inferenceScope: InferenceScope;
1387
+ /** Context authentication rules */
1388
+ contextAuthentication: ContextAuthenticationRequirements;
1389
+ /** Dual-channel configuration */
1390
+ dualChannel: DualChannelConfig;
1391
+ /** Credential metadata */
1392
+ metadata?: {
1393
+ /** Issuer DID */
1394
+ issuer?: string;
1395
+ /** Issuance date */
1396
+ issuedAt?: Date;
1397
+ /** Expiration date */
1398
+ expiresAt?: Date;
1399
+ /** Credential version */
1400
+ version?: string;
1401
+ };
1402
+ }
1403
+ export declare const SemanticGovernanceCredentialSchema: z.ZodObject<{
1404
+ id: z.ZodString;
1405
+ carId: z.ZodString;
1406
+ instructionIntegrity: z.ZodObject<{
1407
+ allowedInstructionHashes: z.ZodArray<z.ZodString, "many">;
1408
+ instructionTemplates: z.ZodArray<z.ZodObject<{
1409
+ id: z.ZodString;
1410
+ hash: z.ZodString;
1411
+ description: z.ZodString;
1412
+ parameterSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
1413
+ }, "strip", z.ZodTypeAny, {
1414
+ id?: string;
1415
+ description?: string;
1416
+ hash?: string;
1417
+ parameterSchema?: Record<string, unknown>;
1418
+ }, {
1419
+ id?: string;
1420
+ description?: string;
1421
+ hash?: string;
1422
+ parameterSchema?: Record<string, unknown>;
1423
+ }>, "many">;
1424
+ instructionSource: z.ZodObject<{
1425
+ allowedSources: z.ZodArray<z.ZodString, "many">;
1426
+ requireSignature: z.ZodBoolean;
1427
+ }, "strip", z.ZodTypeAny, {
1428
+ allowedSources?: string[];
1429
+ requireSignature?: boolean;
1430
+ }, {
1431
+ allowedSources?: string[];
1432
+ requireSignature?: boolean;
1433
+ }>;
1434
+ }, "strip", z.ZodTypeAny, {
1435
+ allowedInstructionHashes?: string[];
1436
+ instructionTemplates?: {
1437
+ id?: string;
1438
+ description?: string;
1439
+ hash?: string;
1440
+ parameterSchema?: Record<string, unknown>;
1441
+ }[];
1442
+ instructionSource?: {
1443
+ allowedSources?: string[];
1444
+ requireSignature?: boolean;
1445
+ };
1446
+ }, {
1447
+ allowedInstructionHashes?: string[];
1448
+ instructionTemplates?: {
1449
+ id?: string;
1450
+ description?: string;
1451
+ hash?: string;
1452
+ parameterSchema?: Record<string, unknown>;
1453
+ }[];
1454
+ instructionSource?: {
1455
+ allowedSources?: string[];
1456
+ requireSignature?: boolean;
1457
+ };
1458
+ }>;
1459
+ outputBinding: z.ZodObject<{
1460
+ allowedSchemas: z.ZodArray<z.ZodObject<{
1461
+ id: z.ZodString;
1462
+ description: z.ZodString;
1463
+ jsonSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
1464
+ }, "strip", z.ZodTypeAny, {
1465
+ id?: string;
1466
+ description?: string;
1467
+ jsonSchema?: Record<string, unknown>;
1468
+ }, {
1469
+ id?: string;
1470
+ description?: string;
1471
+ jsonSchema?: Record<string, unknown>;
1472
+ }>, "many">;
1473
+ prohibitedPatterns: z.ZodArray<z.ZodObject<{
1474
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
1475
+ pattern: z.ZodString;
1476
+ description: z.ZodString;
1477
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
1478
+ }, "strip", z.ZodTypeAny, {
1479
+ type?: "regex" | "keyword" | "semantic";
1480
+ pattern?: string;
1481
+ description?: string;
1482
+ severity?: "low" | "medium" | "high" | "critical";
1483
+ }, {
1484
+ type?: "regex" | "keyword" | "semantic";
1485
+ pattern?: string;
1486
+ description?: string;
1487
+ severity?: "low" | "medium" | "high" | "critical";
1488
+ }>, "many">;
1489
+ allowedExternalEndpoints: z.ZodArray<z.ZodString, "many">;
1490
+ blockedExternalEndpoints: z.ZodArray<z.ZodString, "many">;
1491
+ }, "strip", z.ZodTypeAny, {
1492
+ allowedSchemas?: {
1493
+ id?: string;
1494
+ description?: string;
1495
+ jsonSchema?: Record<string, unknown>;
1496
+ }[];
1497
+ prohibitedPatterns?: {
1498
+ type?: "regex" | "keyword" | "semantic";
1499
+ pattern?: string;
1500
+ description?: string;
1501
+ severity?: "low" | "medium" | "high" | "critical";
1502
+ }[];
1503
+ allowedExternalEndpoints?: string[];
1504
+ blockedExternalEndpoints?: string[];
1505
+ }, {
1506
+ allowedSchemas?: {
1507
+ id?: string;
1508
+ description?: string;
1509
+ jsonSchema?: Record<string, unknown>;
1510
+ }[];
1511
+ prohibitedPatterns?: {
1512
+ type?: "regex" | "keyword" | "semantic";
1513
+ pattern?: string;
1514
+ description?: string;
1515
+ severity?: "low" | "medium" | "high" | "critical";
1516
+ }[];
1517
+ allowedExternalEndpoints?: string[];
1518
+ blockedExternalEndpoints?: string[];
1519
+ }>;
1520
+ inferenceScope: z.ZodObject<{
1521
+ globalLevel: z.ZodNativeEnum<typeof InferenceLevel>;
1522
+ domainOverrides: z.ZodArray<z.ZodObject<{
1523
+ domain: z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>;
1524
+ level: z.ZodNativeEnum<typeof InferenceLevel>;
1525
+ reason: z.ZodString;
1526
+ }, "strip", z.ZodTypeAny, {
1527
+ level?: InferenceLevel;
1528
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1529
+ reason?: string;
1530
+ }, {
1531
+ level?: InferenceLevel;
1532
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1533
+ reason?: string;
1534
+ }>, "many">;
1535
+ derivedKnowledgeHandling: z.ZodObject<{
1536
+ retention: z.ZodEnum<["none", "session", "persistent"]>;
1537
+ allowedRecipients: z.ZodArray<z.ZodString, "many">;
1538
+ crossContextSharing: z.ZodBoolean;
1539
+ }, "strip", z.ZodTypeAny, {
1540
+ retention?: "none" | "session" | "persistent";
1541
+ allowedRecipients?: string[];
1542
+ crossContextSharing?: boolean;
1543
+ }, {
1544
+ retention?: "none" | "session" | "persistent";
1545
+ allowedRecipients?: string[];
1546
+ crossContextSharing?: boolean;
1547
+ }>;
1548
+ piiInference: z.ZodObject<{
1549
+ allowed: z.ZodBoolean;
1550
+ handling: z.ZodEnum<["block", "redact", "hash"]>;
1551
+ }, "strip", z.ZodTypeAny, {
1552
+ allowed?: boolean;
1553
+ handling?: "block" | "hash" | "redact";
1554
+ }, {
1555
+ allowed?: boolean;
1556
+ handling?: "block" | "hash" | "redact";
1557
+ }>;
1558
+ }, "strip", z.ZodTypeAny, {
1559
+ globalLevel?: InferenceLevel;
1560
+ domainOverrides?: {
1561
+ level?: InferenceLevel;
1562
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1563
+ reason?: string;
1564
+ }[];
1565
+ derivedKnowledgeHandling?: {
1566
+ retention?: "none" | "session" | "persistent";
1567
+ allowedRecipients?: string[];
1568
+ crossContextSharing?: boolean;
1569
+ };
1570
+ piiInference?: {
1571
+ allowed?: boolean;
1572
+ handling?: "block" | "hash" | "redact";
1573
+ };
1574
+ }, {
1575
+ globalLevel?: InferenceLevel;
1576
+ domainOverrides?: {
1577
+ level?: InferenceLevel;
1578
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1579
+ reason?: string;
1580
+ }[];
1581
+ derivedKnowledgeHandling?: {
1582
+ retention?: "none" | "session" | "persistent";
1583
+ allowedRecipients?: string[];
1584
+ crossContextSharing?: boolean;
1585
+ };
1586
+ piiInference?: {
1587
+ allowed?: boolean;
1588
+ handling?: "block" | "hash" | "redact";
1589
+ };
1590
+ }>;
1591
+ contextAuthentication: z.ZodObject<{
1592
+ required: z.ZodBoolean;
1593
+ minTrustTier: z.ZodNativeEnum<typeof TrustTier>;
1594
+ requiredDomains: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>;
1595
+ allowedProviders: z.ZodArray<z.ZodString, "many">;
1596
+ blockedProviders: z.ZodArray<z.ZodString, "many">;
1597
+ contentIntegrity: z.ZodObject<{
1598
+ signatureRequired: z.ZodBoolean;
1599
+ maxAge: z.ZodNumber;
1600
+ allowedFormats: z.ZodArray<z.ZodString, "many">;
1601
+ }, "strip", z.ZodTypeAny, {
1602
+ maxAge?: number;
1603
+ signatureRequired?: boolean;
1604
+ allowedFormats?: string[];
1605
+ }, {
1606
+ maxAge?: number;
1607
+ signatureRequired?: boolean;
1608
+ allowedFormats?: string[];
1609
+ }>;
1610
+ }, "strip", z.ZodTypeAny, {
1611
+ required?: boolean;
1612
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1613
+ minTrustTier?: TrustTier;
1614
+ allowedProviders?: string[];
1615
+ blockedProviders?: string[];
1616
+ contentIntegrity?: {
1617
+ maxAge?: number;
1618
+ signatureRequired?: boolean;
1619
+ allowedFormats?: string[];
1620
+ };
1621
+ }, {
1622
+ required?: boolean;
1623
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1624
+ minTrustTier?: TrustTier;
1625
+ allowedProviders?: string[];
1626
+ blockedProviders?: string[];
1627
+ contentIntegrity?: {
1628
+ maxAge?: number;
1629
+ signatureRequired?: boolean;
1630
+ allowedFormats?: string[];
1631
+ };
1632
+ }>;
1633
+ dualChannel: z.ZodObject<{
1634
+ enforced: z.ZodBoolean;
1635
+ controlPlaneSources: z.ZodArray<z.ZodString, "many">;
1636
+ dataPlaneTreatment: z.ZodEnum<["block", "sanitize", "warn"]>;
1637
+ }, "strip", z.ZodTypeAny, {
1638
+ enforced?: boolean;
1639
+ controlPlaneSources?: string[];
1640
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1641
+ }, {
1642
+ enforced?: boolean;
1643
+ controlPlaneSources?: string[];
1644
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1645
+ }>;
1646
+ metadata: z.ZodOptional<z.ZodObject<{
1647
+ issuer: z.ZodOptional<z.ZodString>;
1648
+ issuedAt: z.ZodOptional<z.ZodDate>;
1649
+ expiresAt: z.ZodOptional<z.ZodDate>;
1650
+ version: z.ZodOptional<z.ZodString>;
1651
+ }, "strip", z.ZodTypeAny, {
1652
+ expiresAt?: Date;
1653
+ version?: string;
1654
+ issuer?: string;
1655
+ issuedAt?: Date;
1656
+ }, {
1657
+ expiresAt?: Date;
1658
+ version?: string;
1659
+ issuer?: string;
1660
+ issuedAt?: Date;
1661
+ }>>;
1662
+ }, "strip", z.ZodTypeAny, {
1663
+ id?: string;
1664
+ metadata?: {
1665
+ expiresAt?: Date;
1666
+ version?: string;
1667
+ issuer?: string;
1668
+ issuedAt?: Date;
1669
+ };
1670
+ carId?: string;
1671
+ instructionIntegrity?: {
1672
+ allowedInstructionHashes?: string[];
1673
+ instructionTemplates?: {
1674
+ id?: string;
1675
+ description?: string;
1676
+ hash?: string;
1677
+ parameterSchema?: Record<string, unknown>;
1678
+ }[];
1679
+ instructionSource?: {
1680
+ allowedSources?: string[];
1681
+ requireSignature?: boolean;
1682
+ };
1683
+ };
1684
+ outputBinding?: {
1685
+ allowedSchemas?: {
1686
+ id?: string;
1687
+ description?: string;
1688
+ jsonSchema?: Record<string, unknown>;
1689
+ }[];
1690
+ prohibitedPatterns?: {
1691
+ type?: "regex" | "keyword" | "semantic";
1692
+ pattern?: string;
1693
+ description?: string;
1694
+ severity?: "low" | "medium" | "high" | "critical";
1695
+ }[];
1696
+ allowedExternalEndpoints?: string[];
1697
+ blockedExternalEndpoints?: string[];
1698
+ };
1699
+ inferenceScope?: {
1700
+ globalLevel?: InferenceLevel;
1701
+ domainOverrides?: {
1702
+ level?: InferenceLevel;
1703
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1704
+ reason?: string;
1705
+ }[];
1706
+ derivedKnowledgeHandling?: {
1707
+ retention?: "none" | "session" | "persistent";
1708
+ allowedRecipients?: string[];
1709
+ crossContextSharing?: boolean;
1710
+ };
1711
+ piiInference?: {
1712
+ allowed?: boolean;
1713
+ handling?: "block" | "hash" | "redact";
1714
+ };
1715
+ };
1716
+ contextAuthentication?: {
1717
+ required?: boolean;
1718
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1719
+ minTrustTier?: TrustTier;
1720
+ allowedProviders?: string[];
1721
+ blockedProviders?: string[];
1722
+ contentIntegrity?: {
1723
+ maxAge?: number;
1724
+ signatureRequired?: boolean;
1725
+ allowedFormats?: string[];
1726
+ };
1727
+ };
1728
+ dualChannel?: {
1729
+ enforced?: boolean;
1730
+ controlPlaneSources?: string[];
1731
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1732
+ };
1733
+ }, {
1734
+ id?: string;
1735
+ metadata?: {
1736
+ expiresAt?: Date;
1737
+ version?: string;
1738
+ issuer?: string;
1739
+ issuedAt?: Date;
1740
+ };
1741
+ carId?: string;
1742
+ instructionIntegrity?: {
1743
+ allowedInstructionHashes?: string[];
1744
+ instructionTemplates?: {
1745
+ id?: string;
1746
+ description?: string;
1747
+ hash?: string;
1748
+ parameterSchema?: Record<string, unknown>;
1749
+ }[];
1750
+ instructionSource?: {
1751
+ allowedSources?: string[];
1752
+ requireSignature?: boolean;
1753
+ };
1754
+ };
1755
+ outputBinding?: {
1756
+ allowedSchemas?: {
1757
+ id?: string;
1758
+ description?: string;
1759
+ jsonSchema?: Record<string, unknown>;
1760
+ }[];
1761
+ prohibitedPatterns?: {
1762
+ type?: "regex" | "keyword" | "semantic";
1763
+ pattern?: string;
1764
+ description?: string;
1765
+ severity?: "low" | "medium" | "high" | "critical";
1766
+ }[];
1767
+ allowedExternalEndpoints?: string[];
1768
+ blockedExternalEndpoints?: string[];
1769
+ };
1770
+ inferenceScope?: {
1771
+ globalLevel?: InferenceLevel;
1772
+ domainOverrides?: {
1773
+ level?: InferenceLevel;
1774
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
1775
+ reason?: string;
1776
+ }[];
1777
+ derivedKnowledgeHandling?: {
1778
+ retention?: "none" | "session" | "persistent";
1779
+ allowedRecipients?: string[];
1780
+ crossContextSharing?: boolean;
1781
+ };
1782
+ piiInference?: {
1783
+ allowed?: boolean;
1784
+ handling?: "block" | "hash" | "redact";
1785
+ };
1786
+ };
1787
+ contextAuthentication?: {
1788
+ required?: boolean;
1789
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1790
+ minTrustTier?: TrustTier;
1791
+ allowedProviders?: string[];
1792
+ blockedProviders?: string[];
1793
+ contentIntegrity?: {
1794
+ maxAge?: number;
1795
+ signatureRequired?: boolean;
1796
+ allowedFormats?: string[];
1797
+ };
1798
+ };
1799
+ dualChannel?: {
1800
+ enforced?: boolean;
1801
+ controlPlaneSources?: string[];
1802
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
1803
+ };
1804
+ }>;
1805
+ /**
1806
+ * Agent identity for semantic governance
1807
+ */
1808
+ export interface AgentIdentity {
1809
+ /** Agent DID */
1810
+ did: string;
1811
+ /** Full CAR ID string */
1812
+ carId: string;
1813
+ /** Trust tier */
1814
+ trustTier: TrustTier;
1815
+ /** Capability domains */
1816
+ domains: DomainCode[];
1817
+ /** Service endpoint URL */
1818
+ serviceEndpoint?: string;
1819
+ }
1820
+ export declare const AgentIdentitySchema: z.ZodObject<{
1821
+ did: z.ZodString;
1822
+ carId: z.ZodString;
1823
+ trustTier: z.ZodNativeEnum<typeof TrustTier>;
1824
+ domains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
1825
+ serviceEndpoint: z.ZodOptional<z.ZodString>;
1826
+ }, "strip", z.ZodTypeAny, {
1827
+ did?: string;
1828
+ trustTier?: TrustTier;
1829
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1830
+ carId?: string;
1831
+ serviceEndpoint?: string;
1832
+ }, {
1833
+ did?: string;
1834
+ trustTier?: TrustTier;
1835
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1836
+ carId?: string;
1837
+ serviceEndpoint?: string;
1838
+ }>;
1839
+ /**
1840
+ * Action request for pre-action validation
1841
+ */
1842
+ export interface ActionRequest {
1843
+ /** Action type/name */
1844
+ type: string;
1845
+ /** Target resource */
1846
+ target?: string;
1847
+ /** Action parameters */
1848
+ params?: Record<string, unknown>;
1849
+ /** System instruction */
1850
+ instruction?: string;
1851
+ /** Context sources */
1852
+ contextSources?: Array<{
1853
+ providerId: string;
1854
+ content: unknown;
1855
+ signature?: string;
1856
+ }>;
1857
+ /** Requested inference operations */
1858
+ inferenceOperations?: InferenceOperation[];
1859
+ }
1860
+ export declare const ActionRequestSchema: z.ZodObject<{
1861
+ type: z.ZodString;
1862
+ target: z.ZodOptional<z.ZodString>;
1863
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
1864
+ instruction: z.ZodOptional<z.ZodString>;
1865
+ contextSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
1866
+ providerId: z.ZodString;
1867
+ content: z.ZodUnknown;
1868
+ signature: z.ZodOptional<z.ZodString>;
1869
+ }, "strip", z.ZodTypeAny, {
1870
+ content?: unknown;
1871
+ providerId?: string;
1872
+ signature?: string;
1873
+ }, {
1874
+ content?: unknown;
1875
+ providerId?: string;
1876
+ signature?: string;
1877
+ }>, "many">>;
1878
+ inferenceOperations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1879
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
1880
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
1881
+ description: z.ZodOptional<z.ZodString>;
1882
+ customLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
1883
+ }, "strip", z.ZodTypeAny, {
1884
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1885
+ description?: string;
1886
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1887
+ customLevel?: InferenceLevel;
1888
+ }, {
1889
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1890
+ description?: string;
1891
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1892
+ customLevel?: InferenceLevel;
1893
+ }>, "many">>;
1894
+ }, "strip", z.ZodTypeAny, {
1895
+ params?: Record<string, unknown>;
1896
+ type?: string;
1897
+ target?: string;
1898
+ instruction?: string;
1899
+ contextSources?: {
1900
+ content?: unknown;
1901
+ providerId?: string;
1902
+ signature?: string;
1903
+ }[];
1904
+ inferenceOperations?: {
1905
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1906
+ description?: string;
1907
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1908
+ customLevel?: InferenceLevel;
1909
+ }[];
1910
+ }, {
1911
+ params?: Record<string, unknown>;
1912
+ type?: string;
1913
+ target?: string;
1914
+ instruction?: string;
1915
+ contextSources?: {
1916
+ content?: unknown;
1917
+ providerId?: string;
1918
+ signature?: string;
1919
+ }[];
1920
+ inferenceOperations?: {
1921
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1922
+ description?: string;
1923
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1924
+ customLevel?: InferenceLevel;
1925
+ }[];
1926
+ }>;
1927
+ /**
1928
+ * Action record for post-action validation
1929
+ */
1930
+ export interface ActionRecord {
1931
+ /** Action type/name */
1932
+ type: string;
1933
+ /** Target resource */
1934
+ target?: string;
1935
+ /** Action output */
1936
+ output: unknown;
1937
+ /** Derived knowledge produced */
1938
+ derivedKnowledge?: DerivedKnowledge[];
1939
+ /** External endpoints accessed */
1940
+ externalEndpoints?: string[];
1941
+ /** Execution duration in ms */
1942
+ durationMs?: number;
1943
+ }
1944
+ export declare const ActionRecordSchema: z.ZodObject<{
1945
+ type: z.ZodString;
1946
+ target: z.ZodOptional<z.ZodString>;
1947
+ output: z.ZodUnknown;
1948
+ derivedKnowledge: z.ZodOptional<z.ZodArray<z.ZodObject<{
1949
+ id: z.ZodString;
1950
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
1951
+ sourceIds: z.ZodArray<z.ZodString, "many">;
1952
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
1953
+ content: z.ZodUnknown;
1954
+ createdAt: z.ZodDate;
1955
+ inferenceLevel: z.ZodNativeEnum<typeof InferenceLevel>;
1956
+ }, "strip", z.ZodTypeAny, {
1957
+ id?: string;
1958
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1959
+ createdAt?: Date;
1960
+ content?: unknown;
1961
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1962
+ sourceIds?: string[];
1963
+ inferenceLevel?: InferenceLevel;
1964
+ }, {
1965
+ id?: string;
1966
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1967
+ createdAt?: Date;
1968
+ content?: unknown;
1969
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1970
+ sourceIds?: string[];
1971
+ inferenceLevel?: InferenceLevel;
1972
+ }>, "many">>;
1973
+ externalEndpoints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1974
+ durationMs: z.ZodOptional<z.ZodNumber>;
1975
+ }, "strip", z.ZodTypeAny, {
1976
+ type?: string;
1977
+ target?: string;
1978
+ durationMs?: number;
1979
+ output?: unknown;
1980
+ derivedKnowledge?: {
1981
+ id?: string;
1982
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1983
+ createdAt?: Date;
1984
+ content?: unknown;
1985
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
1986
+ sourceIds?: string[];
1987
+ inferenceLevel?: InferenceLevel;
1988
+ }[];
1989
+ externalEndpoints?: string[];
1990
+ }, {
1991
+ type?: string;
1992
+ target?: string;
1993
+ durationMs?: number;
1994
+ output?: unknown;
1995
+ derivedKnowledge?: {
1996
+ id?: string;
1997
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
1998
+ createdAt?: Date;
1999
+ content?: unknown;
2000
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2001
+ sourceIds?: string[];
2002
+ inferenceLevel?: InferenceLevel;
2003
+ }[];
2004
+ externalEndpoints?: string[];
2005
+ }>;
2006
+ /**
2007
+ * Complete agent interaction for validation
2008
+ */
2009
+ export interface AgentInteraction {
2010
+ /** Interaction ID */
2011
+ id: string;
2012
+ /** Agent identity */
2013
+ agent: AgentIdentity;
2014
+ /** Incoming message */
2015
+ message: {
2016
+ source: string;
2017
+ content: string;
2018
+ authenticated: boolean;
2019
+ timestamp: Date;
2020
+ };
2021
+ /** System instruction */
2022
+ instruction?: string;
2023
+ /** Context data */
2024
+ context?: Array<{
2025
+ providerId: string;
2026
+ content: unknown;
2027
+ signature?: string;
2028
+ timestamp?: Date;
2029
+ }>;
2030
+ /** Planned/executed action */
2031
+ action?: ActionRequest | ActionRecord;
2032
+ }
2033
+ export declare const AgentInteractionSchema: z.ZodObject<{
2034
+ id: z.ZodString;
2035
+ agent: z.ZodObject<{
2036
+ did: z.ZodString;
2037
+ carId: z.ZodString;
2038
+ trustTier: z.ZodNativeEnum<typeof TrustTier>;
2039
+ domains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
2040
+ serviceEndpoint: z.ZodOptional<z.ZodString>;
2041
+ }, "strip", z.ZodTypeAny, {
2042
+ did?: string;
2043
+ trustTier?: TrustTier;
2044
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2045
+ carId?: string;
2046
+ serviceEndpoint?: string;
2047
+ }, {
2048
+ did?: string;
2049
+ trustTier?: TrustTier;
2050
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2051
+ carId?: string;
2052
+ serviceEndpoint?: string;
2053
+ }>;
2054
+ message: z.ZodObject<{
2055
+ source: z.ZodString;
2056
+ content: z.ZodString;
2057
+ authenticated: z.ZodBoolean;
2058
+ timestamp: z.ZodDate;
2059
+ }, "strip", z.ZodTypeAny, {
2060
+ timestamp?: Date;
2061
+ content?: string;
2062
+ source?: string;
2063
+ authenticated?: boolean;
2064
+ }, {
2065
+ timestamp?: Date;
2066
+ content?: string;
2067
+ source?: string;
2068
+ authenticated?: boolean;
2069
+ }>;
2070
+ instruction: z.ZodOptional<z.ZodString>;
2071
+ context: z.ZodOptional<z.ZodArray<z.ZodObject<{
2072
+ providerId: z.ZodString;
2073
+ content: z.ZodUnknown;
2074
+ signature: z.ZodOptional<z.ZodString>;
2075
+ timestamp: z.ZodOptional<z.ZodDate>;
2076
+ }, "strip", z.ZodTypeAny, {
2077
+ timestamp?: Date;
2078
+ content?: unknown;
2079
+ providerId?: string;
2080
+ signature?: string;
2081
+ }, {
2082
+ timestamp?: Date;
2083
+ content?: unknown;
2084
+ providerId?: string;
2085
+ signature?: string;
2086
+ }>, "many">>;
2087
+ action: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
2088
+ type: z.ZodString;
2089
+ target: z.ZodOptional<z.ZodString>;
2090
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2091
+ instruction: z.ZodOptional<z.ZodString>;
2092
+ contextSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
2093
+ providerId: z.ZodString;
2094
+ content: z.ZodUnknown;
2095
+ signature: z.ZodOptional<z.ZodString>;
2096
+ }, "strip", z.ZodTypeAny, {
2097
+ content?: unknown;
2098
+ providerId?: string;
2099
+ signature?: string;
2100
+ }, {
2101
+ content?: unknown;
2102
+ providerId?: string;
2103
+ signature?: string;
2104
+ }>, "many">>;
2105
+ inferenceOperations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2106
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
2107
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
2108
+ description: z.ZodOptional<z.ZodString>;
2109
+ customLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2110
+ }, "strip", z.ZodTypeAny, {
2111
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2112
+ description?: string;
2113
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2114
+ customLevel?: InferenceLevel;
2115
+ }, {
2116
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2117
+ description?: string;
2118
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2119
+ customLevel?: InferenceLevel;
2120
+ }>, "many">>;
2121
+ }, "strip", z.ZodTypeAny, {
2122
+ params?: Record<string, unknown>;
2123
+ type?: string;
2124
+ target?: string;
2125
+ instruction?: string;
2126
+ contextSources?: {
2127
+ content?: unknown;
2128
+ providerId?: string;
2129
+ signature?: string;
2130
+ }[];
2131
+ inferenceOperations?: {
2132
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2133
+ description?: string;
2134
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2135
+ customLevel?: InferenceLevel;
2136
+ }[];
2137
+ }, {
2138
+ params?: Record<string, unknown>;
2139
+ type?: string;
2140
+ target?: string;
2141
+ instruction?: string;
2142
+ contextSources?: {
2143
+ content?: unknown;
2144
+ providerId?: string;
2145
+ signature?: string;
2146
+ }[];
2147
+ inferenceOperations?: {
2148
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2149
+ description?: string;
2150
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2151
+ customLevel?: InferenceLevel;
2152
+ }[];
2153
+ }>, z.ZodObject<{
2154
+ type: z.ZodString;
2155
+ target: z.ZodOptional<z.ZodString>;
2156
+ output: z.ZodUnknown;
2157
+ derivedKnowledge: z.ZodOptional<z.ZodArray<z.ZodObject<{
2158
+ id: z.ZodString;
2159
+ type: z.ZodEnum<["aggregate", "count", "average", "entity-extraction", "relationship-inference", "pattern-prediction", "sentiment-analysis", "classification", "summarization", "custom"]>;
2160
+ sourceIds: z.ZodArray<z.ZodString, "many">;
2161
+ sourceDomains: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
2162
+ content: z.ZodUnknown;
2163
+ createdAt: z.ZodDate;
2164
+ inferenceLevel: z.ZodNativeEnum<typeof InferenceLevel>;
2165
+ }, "strip", z.ZodTypeAny, {
2166
+ id?: string;
2167
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2168
+ createdAt?: Date;
2169
+ content?: unknown;
2170
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2171
+ sourceIds?: string[];
2172
+ inferenceLevel?: InferenceLevel;
2173
+ }, {
2174
+ id?: string;
2175
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2176
+ createdAt?: Date;
2177
+ content?: unknown;
2178
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2179
+ sourceIds?: string[];
2180
+ inferenceLevel?: InferenceLevel;
2181
+ }>, "many">>;
2182
+ externalEndpoints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2183
+ durationMs: z.ZodOptional<z.ZodNumber>;
2184
+ }, "strip", z.ZodTypeAny, {
2185
+ type?: string;
2186
+ target?: string;
2187
+ durationMs?: number;
2188
+ output?: unknown;
2189
+ derivedKnowledge?: {
2190
+ id?: string;
2191
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2192
+ createdAt?: Date;
2193
+ content?: unknown;
2194
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2195
+ sourceIds?: string[];
2196
+ inferenceLevel?: InferenceLevel;
2197
+ }[];
2198
+ externalEndpoints?: string[];
2199
+ }, {
2200
+ type?: string;
2201
+ target?: string;
2202
+ durationMs?: number;
2203
+ output?: unknown;
2204
+ derivedKnowledge?: {
2205
+ id?: string;
2206
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2207
+ createdAt?: Date;
2208
+ content?: unknown;
2209
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2210
+ sourceIds?: string[];
2211
+ inferenceLevel?: InferenceLevel;
2212
+ }[];
2213
+ externalEndpoints?: string[];
2214
+ }>]>>;
2215
+ }, "strip", z.ZodTypeAny, {
2216
+ id?: string;
2217
+ message?: {
2218
+ timestamp?: Date;
2219
+ content?: string;
2220
+ source?: string;
2221
+ authenticated?: boolean;
2222
+ };
2223
+ agent?: {
2224
+ did?: string;
2225
+ trustTier?: TrustTier;
2226
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2227
+ carId?: string;
2228
+ serviceEndpoint?: string;
2229
+ };
2230
+ context?: {
2231
+ timestamp?: Date;
2232
+ content?: unknown;
2233
+ providerId?: string;
2234
+ signature?: string;
2235
+ }[];
2236
+ action?: {
2237
+ params?: Record<string, unknown>;
2238
+ type?: string;
2239
+ target?: string;
2240
+ instruction?: string;
2241
+ contextSources?: {
2242
+ content?: unknown;
2243
+ providerId?: string;
2244
+ signature?: string;
2245
+ }[];
2246
+ inferenceOperations?: {
2247
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2248
+ description?: string;
2249
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2250
+ customLevel?: InferenceLevel;
2251
+ }[];
2252
+ } | {
2253
+ type?: string;
2254
+ target?: string;
2255
+ durationMs?: number;
2256
+ output?: unknown;
2257
+ derivedKnowledge?: {
2258
+ id?: string;
2259
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2260
+ createdAt?: Date;
2261
+ content?: unknown;
2262
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2263
+ sourceIds?: string[];
2264
+ inferenceLevel?: InferenceLevel;
2265
+ }[];
2266
+ externalEndpoints?: string[];
2267
+ };
2268
+ instruction?: string;
2269
+ }, {
2270
+ id?: string;
2271
+ message?: {
2272
+ timestamp?: Date;
2273
+ content?: string;
2274
+ source?: string;
2275
+ authenticated?: boolean;
2276
+ };
2277
+ agent?: {
2278
+ did?: string;
2279
+ trustTier?: TrustTier;
2280
+ domains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2281
+ carId?: string;
2282
+ serviceEndpoint?: string;
2283
+ };
2284
+ context?: {
2285
+ timestamp?: Date;
2286
+ content?: unknown;
2287
+ providerId?: string;
2288
+ signature?: string;
2289
+ }[];
2290
+ action?: {
2291
+ params?: Record<string, unknown>;
2292
+ type?: string;
2293
+ target?: string;
2294
+ instruction?: string;
2295
+ contextSources?: {
2296
+ content?: unknown;
2297
+ providerId?: string;
2298
+ signature?: string;
2299
+ }[];
2300
+ inferenceOperations?: {
2301
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2302
+ description?: string;
2303
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2304
+ customLevel?: InferenceLevel;
2305
+ }[];
2306
+ } | {
2307
+ type?: string;
2308
+ target?: string;
2309
+ durationMs?: number;
2310
+ output?: unknown;
2311
+ derivedKnowledge?: {
2312
+ id?: string;
2313
+ type?: "custom" | "count" | "classification" | "aggregate" | "average" | "entity-extraction" | "relationship-inference" | "pattern-prediction" | "sentiment-analysis" | "summarization";
2314
+ createdAt?: Date;
2315
+ content?: unknown;
2316
+ sourceDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
2317
+ sourceIds?: string[];
2318
+ inferenceLevel?: InferenceLevel;
2319
+ }[];
2320
+ externalEndpoints?: string[];
2321
+ };
2322
+ instruction?: string;
2323
+ }>;
2324
+ /**
2325
+ * Pre-action validation result
2326
+ */
2327
+ export interface PreActionResult {
2328
+ /** Whether action is allowed to proceed */
2329
+ allowed: boolean;
2330
+ /** Reason for rejection */
2331
+ reason?: string;
2332
+ /** Instruction validation result */
2333
+ instructionValidation?: InstructionValidationResult;
2334
+ /** Context validation results */
2335
+ contextValidations?: ContextValidationResult[];
2336
+ /** Inference validation results */
2337
+ inferenceValidations?: InferenceValidationResult[];
2338
+ /** Channel enforcement result */
2339
+ channelEnforcement?: EnforcementResult;
2340
+ /** Warnings (action allowed but with caveats) */
2341
+ warnings?: string[];
2342
+ }
2343
+ export declare const PreActionResultSchema: z.ZodObject<{
2344
+ allowed: z.ZodBoolean;
2345
+ reason: z.ZodOptional<z.ZodString>;
2346
+ instructionValidation: z.ZodOptional<z.ZodObject<{
2347
+ valid: z.ZodBoolean;
2348
+ method: z.ZodOptional<z.ZodEnum<["exact-match", "template-match", "signed-source"]>>;
2349
+ templateId: z.ZodOptional<z.ZodString>;
2350
+ reason: z.ZodOptional<z.ZodString>;
2351
+ instructionHash: z.ZodOptional<z.ZodString>;
2352
+ extractedParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2353
+ }, "strip", z.ZodTypeAny, {
2354
+ valid?: boolean;
2355
+ method?: "exact-match" | "template-match" | "signed-source";
2356
+ reason?: string;
2357
+ templateId?: string;
2358
+ instructionHash?: string;
2359
+ extractedParams?: Record<string, unknown>;
2360
+ }, {
2361
+ valid?: boolean;
2362
+ method?: "exact-match" | "template-match" | "signed-source";
2363
+ reason?: string;
2364
+ templateId?: string;
2365
+ instructionHash?: string;
2366
+ extractedParams?: Record<string, unknown>;
2367
+ }>>;
2368
+ contextValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2369
+ valid: z.ZodBoolean;
2370
+ reason: z.ZodOptional<z.ZodString>;
2371
+ providerValidation: z.ZodOptional<z.ZodObject<{
2372
+ valid: z.ZodBoolean;
2373
+ providerId: z.ZodString;
2374
+ trustTier: z.ZodOptional<z.ZodNativeEnum<typeof TrustTier>>;
2375
+ reason: z.ZodOptional<z.ZodString>;
2376
+ blocked: z.ZodOptional<z.ZodBoolean>;
2377
+ }, "strip", z.ZodTypeAny, {
2378
+ valid?: boolean;
2379
+ providerId?: string;
2380
+ reason?: string;
2381
+ blocked?: boolean;
2382
+ trustTier?: TrustTier;
2383
+ }, {
2384
+ valid?: boolean;
2385
+ providerId?: string;
2386
+ reason?: string;
2387
+ blocked?: boolean;
2388
+ trustTier?: TrustTier;
2389
+ }>>;
2390
+ contentValidation: z.ZodOptional<z.ZodObject<{
2391
+ valid: z.ZodBoolean;
2392
+ signatureValid: z.ZodOptional<z.ZodBoolean>;
2393
+ ageSeconds: z.ZodOptional<z.ZodNumber>;
2394
+ format: z.ZodOptional<z.ZodString>;
2395
+ reason: z.ZodOptional<z.ZodString>;
2396
+ }, "strip", z.ZodTypeAny, {
2397
+ valid?: boolean;
2398
+ reason?: string;
2399
+ format?: string;
2400
+ signatureValid?: boolean;
2401
+ ageSeconds?: number;
2402
+ }, {
2403
+ valid?: boolean;
2404
+ reason?: string;
2405
+ format?: string;
2406
+ signatureValid?: boolean;
2407
+ ageSeconds?: number;
2408
+ }>>;
2409
+ injectionScan: z.ZodOptional<z.ZodObject<{
2410
+ detected: z.ZodBoolean;
2411
+ patterns: z.ZodArray<z.ZodString, "many">;
2412
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
2413
+ descriptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2414
+ }, "strip", z.ZodTypeAny, {
2415
+ severity?: "low" | "medium" | "high" | "critical";
2416
+ detected?: boolean;
2417
+ patterns?: string[];
2418
+ descriptions?: string[];
2419
+ }, {
2420
+ severity?: "low" | "medium" | "high" | "critical";
2421
+ detected?: boolean;
2422
+ patterns?: string[];
2423
+ descriptions?: string[];
2424
+ }>>;
2425
+ }, "strip", z.ZodTypeAny, {
2426
+ valid?: boolean;
2427
+ reason?: string;
2428
+ providerValidation?: {
2429
+ valid?: boolean;
2430
+ providerId?: string;
2431
+ reason?: string;
2432
+ blocked?: boolean;
2433
+ trustTier?: TrustTier;
2434
+ };
2435
+ contentValidation?: {
2436
+ valid?: boolean;
2437
+ reason?: string;
2438
+ format?: string;
2439
+ signatureValid?: boolean;
2440
+ ageSeconds?: number;
2441
+ };
2442
+ injectionScan?: {
2443
+ severity?: "low" | "medium" | "high" | "critical";
2444
+ detected?: boolean;
2445
+ patterns?: string[];
2446
+ descriptions?: string[];
2447
+ };
2448
+ }, {
2449
+ valid?: boolean;
2450
+ reason?: string;
2451
+ providerValidation?: {
2452
+ valid?: boolean;
2453
+ providerId?: string;
2454
+ reason?: string;
2455
+ blocked?: boolean;
2456
+ trustTier?: TrustTier;
2457
+ };
2458
+ contentValidation?: {
2459
+ valid?: boolean;
2460
+ reason?: string;
2461
+ format?: string;
2462
+ signatureValid?: boolean;
2463
+ ageSeconds?: number;
2464
+ };
2465
+ injectionScan?: {
2466
+ severity?: "low" | "medium" | "high" | "critical";
2467
+ detected?: boolean;
2468
+ patterns?: string[];
2469
+ descriptions?: string[];
2470
+ };
2471
+ }>, "many">>;
2472
+ inferenceValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2473
+ valid: z.ZodBoolean;
2474
+ reason: z.ZodOptional<z.ZodString>;
2475
+ requiredLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2476
+ agentLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2477
+ restrictedDomain: z.ZodOptional<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>>;
2478
+ }, "strip", z.ZodTypeAny, {
2479
+ valid?: boolean;
2480
+ reason?: string;
2481
+ requiredLevel?: InferenceLevel;
2482
+ agentLevel?: InferenceLevel;
2483
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2484
+ }, {
2485
+ valid?: boolean;
2486
+ reason?: string;
2487
+ requiredLevel?: InferenceLevel;
2488
+ agentLevel?: InferenceLevel;
2489
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2490
+ }>, "many">>;
2491
+ channelEnforcement: z.ZodOptional<z.ZodObject<{
2492
+ allowed: z.ZodBoolean;
2493
+ action: z.ZodEnum<["pass", "block", "sanitize", "warn"]>;
2494
+ reason: z.ZodOptional<z.ZodString>;
2495
+ sanitizedContent: z.ZodOptional<z.ZodString>;
2496
+ strippedInstructions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2497
+ }, "strip", z.ZodTypeAny, {
2498
+ reason?: string;
2499
+ action?: "warn" | "block" | "pass" | "sanitize";
2500
+ allowed?: boolean;
2501
+ sanitizedContent?: string;
2502
+ strippedInstructions?: string[];
2503
+ }, {
2504
+ reason?: string;
2505
+ action?: "warn" | "block" | "pass" | "sanitize";
2506
+ allowed?: boolean;
2507
+ sanitizedContent?: string;
2508
+ strippedInstructions?: string[];
2509
+ }>>;
2510
+ warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2511
+ }, "strip", z.ZodTypeAny, {
2512
+ reason?: string;
2513
+ allowed?: boolean;
2514
+ warnings?: string[];
2515
+ instructionValidation?: {
2516
+ valid?: boolean;
2517
+ method?: "exact-match" | "template-match" | "signed-source";
2518
+ reason?: string;
2519
+ templateId?: string;
2520
+ instructionHash?: string;
2521
+ extractedParams?: Record<string, unknown>;
2522
+ };
2523
+ contextValidations?: {
2524
+ valid?: boolean;
2525
+ reason?: string;
2526
+ providerValidation?: {
2527
+ valid?: boolean;
2528
+ providerId?: string;
2529
+ reason?: string;
2530
+ blocked?: boolean;
2531
+ trustTier?: TrustTier;
2532
+ };
2533
+ contentValidation?: {
2534
+ valid?: boolean;
2535
+ reason?: string;
2536
+ format?: string;
2537
+ signatureValid?: boolean;
2538
+ ageSeconds?: number;
2539
+ };
2540
+ injectionScan?: {
2541
+ severity?: "low" | "medium" | "high" | "critical";
2542
+ detected?: boolean;
2543
+ patterns?: string[];
2544
+ descriptions?: string[];
2545
+ };
2546
+ }[];
2547
+ inferenceValidations?: {
2548
+ valid?: boolean;
2549
+ reason?: string;
2550
+ requiredLevel?: InferenceLevel;
2551
+ agentLevel?: InferenceLevel;
2552
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2553
+ }[];
2554
+ channelEnforcement?: {
2555
+ reason?: string;
2556
+ action?: "warn" | "block" | "pass" | "sanitize";
2557
+ allowed?: boolean;
2558
+ sanitizedContent?: string;
2559
+ strippedInstructions?: string[];
2560
+ };
2561
+ }, {
2562
+ reason?: string;
2563
+ allowed?: boolean;
2564
+ warnings?: string[];
2565
+ instructionValidation?: {
2566
+ valid?: boolean;
2567
+ method?: "exact-match" | "template-match" | "signed-source";
2568
+ reason?: string;
2569
+ templateId?: string;
2570
+ instructionHash?: string;
2571
+ extractedParams?: Record<string, unknown>;
2572
+ };
2573
+ contextValidations?: {
2574
+ valid?: boolean;
2575
+ reason?: string;
2576
+ providerValidation?: {
2577
+ valid?: boolean;
2578
+ providerId?: string;
2579
+ reason?: string;
2580
+ blocked?: boolean;
2581
+ trustTier?: TrustTier;
2582
+ };
2583
+ contentValidation?: {
2584
+ valid?: boolean;
2585
+ reason?: string;
2586
+ format?: string;
2587
+ signatureValid?: boolean;
2588
+ ageSeconds?: number;
2589
+ };
2590
+ injectionScan?: {
2591
+ severity?: "low" | "medium" | "high" | "critical";
2592
+ detected?: boolean;
2593
+ patterns?: string[];
2594
+ descriptions?: string[];
2595
+ };
2596
+ }[];
2597
+ inferenceValidations?: {
2598
+ valid?: boolean;
2599
+ reason?: string;
2600
+ requiredLevel?: InferenceLevel;
2601
+ agentLevel?: InferenceLevel;
2602
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2603
+ }[];
2604
+ channelEnforcement?: {
2605
+ reason?: string;
2606
+ action?: "warn" | "block" | "pass" | "sanitize";
2607
+ allowed?: boolean;
2608
+ sanitizedContent?: string;
2609
+ strippedInstructions?: string[];
2610
+ };
2611
+ }>;
2612
+ /**
2613
+ * Post-action validation result
2614
+ */
2615
+ export interface PostActionResult {
2616
+ /** Whether action result is valid */
2617
+ valid: boolean;
2618
+ /** Reason for rejection */
2619
+ reason?: string;
2620
+ /** Output validation result */
2621
+ outputValidation?: OutputValidationResult;
2622
+ /** Inference validation results */
2623
+ inferenceValidations?: InferenceValidationResult[];
2624
+ /** PII check results */
2625
+ piiChecks?: PIICheckResult[];
2626
+ /** Sanitized output (if modified) */
2627
+ sanitizedOutput?: unknown;
2628
+ /** Warnings */
2629
+ warnings?: string[];
2630
+ }
2631
+ export declare const PostActionResultSchema: z.ZodObject<{
2632
+ valid: z.ZodBoolean;
2633
+ reason: z.ZodOptional<z.ZodString>;
2634
+ outputValidation: z.ZodOptional<z.ZodObject<{
2635
+ valid: z.ZodBoolean;
2636
+ modified: z.ZodOptional<z.ZodBoolean>;
2637
+ output: z.ZodOptional<z.ZodUnknown>;
2638
+ schemaId: z.ZodOptional<z.ZodString>;
2639
+ reason: z.ZodOptional<z.ZodString>;
2640
+ patternScan: z.ZodOptional<z.ZodObject<{
2641
+ detected: z.ZodBoolean;
2642
+ patterns: z.ZodArray<z.ZodObject<{
2643
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
2644
+ pattern: z.ZodString;
2645
+ description: z.ZodString;
2646
+ matches: z.ZodArray<z.ZodString, "many">;
2647
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
2648
+ }, "strip", z.ZodTypeAny, {
2649
+ type?: "regex" | "keyword" | "semantic";
2650
+ pattern?: string;
2651
+ description?: string;
2652
+ severity?: "low" | "medium" | "high" | "critical";
2653
+ matches?: string[];
2654
+ }, {
2655
+ type?: "regex" | "keyword" | "semantic";
2656
+ pattern?: string;
2657
+ description?: string;
2658
+ severity?: "low" | "medium" | "high" | "critical";
2659
+ matches?: string[];
2660
+ }>, "many">;
2661
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
2662
+ }, "strip", z.ZodTypeAny, {
2663
+ severity?: "low" | "medium" | "high" | "critical";
2664
+ detected?: boolean;
2665
+ patterns?: {
2666
+ type?: "regex" | "keyword" | "semantic";
2667
+ pattern?: string;
2668
+ description?: string;
2669
+ severity?: "low" | "medium" | "high" | "critical";
2670
+ matches?: string[];
2671
+ }[];
2672
+ }, {
2673
+ severity?: "low" | "medium" | "high" | "critical";
2674
+ detected?: boolean;
2675
+ patterns?: {
2676
+ type?: "regex" | "keyword" | "semantic";
2677
+ pattern?: string;
2678
+ description?: string;
2679
+ severity?: "low" | "medium" | "high" | "critical";
2680
+ matches?: string[];
2681
+ }[];
2682
+ }>>;
2683
+ }, "strip", z.ZodTypeAny, {
2684
+ valid?: boolean;
2685
+ reason?: string;
2686
+ output?: unknown;
2687
+ modified?: boolean;
2688
+ schemaId?: string;
2689
+ patternScan?: {
2690
+ severity?: "low" | "medium" | "high" | "critical";
2691
+ detected?: boolean;
2692
+ patterns?: {
2693
+ type?: "regex" | "keyword" | "semantic";
2694
+ pattern?: string;
2695
+ description?: string;
2696
+ severity?: "low" | "medium" | "high" | "critical";
2697
+ matches?: string[];
2698
+ }[];
2699
+ };
2700
+ }, {
2701
+ valid?: boolean;
2702
+ reason?: string;
2703
+ output?: unknown;
2704
+ modified?: boolean;
2705
+ schemaId?: string;
2706
+ patternScan?: {
2707
+ severity?: "low" | "medium" | "high" | "critical";
2708
+ detected?: boolean;
2709
+ patterns?: {
2710
+ type?: "regex" | "keyword" | "semantic";
2711
+ pattern?: string;
2712
+ description?: string;
2713
+ severity?: "low" | "medium" | "high" | "critical";
2714
+ matches?: string[];
2715
+ }[];
2716
+ };
2717
+ }>>;
2718
+ inferenceValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2719
+ valid: z.ZodBoolean;
2720
+ reason: z.ZodOptional<z.ZodString>;
2721
+ requiredLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2722
+ agentLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2723
+ restrictedDomain: z.ZodOptional<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>>;
2724
+ }, "strip", z.ZodTypeAny, {
2725
+ valid?: boolean;
2726
+ reason?: string;
2727
+ requiredLevel?: InferenceLevel;
2728
+ agentLevel?: InferenceLevel;
2729
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2730
+ }, {
2731
+ valid?: boolean;
2732
+ reason?: string;
2733
+ requiredLevel?: InferenceLevel;
2734
+ agentLevel?: InferenceLevel;
2735
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2736
+ }>, "many">>;
2737
+ piiChecks: z.ZodOptional<z.ZodArray<z.ZodObject<{
2738
+ containsPII: z.ZodBoolean;
2739
+ piiTypes: z.ZodArray<z.ZodString, "many">;
2740
+ action: z.ZodEnum<["allowed", "blocked", "redacted", "hashed"]>;
2741
+ modifiedData: z.ZodOptional<z.ZodUnknown>;
2742
+ }, "strip", z.ZodTypeAny, {
2743
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
2744
+ containsPII?: boolean;
2745
+ piiTypes?: string[];
2746
+ modifiedData?: unknown;
2747
+ }, {
2748
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
2749
+ containsPII?: boolean;
2750
+ piiTypes?: string[];
2751
+ modifiedData?: unknown;
2752
+ }>, "many">>;
2753
+ sanitizedOutput: z.ZodOptional<z.ZodUnknown>;
2754
+ warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2755
+ }, "strip", z.ZodTypeAny, {
2756
+ valid?: boolean;
2757
+ reason?: string;
2758
+ warnings?: string[];
2759
+ inferenceValidations?: {
2760
+ valid?: boolean;
2761
+ reason?: string;
2762
+ requiredLevel?: InferenceLevel;
2763
+ agentLevel?: InferenceLevel;
2764
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2765
+ }[];
2766
+ outputValidation?: {
2767
+ valid?: boolean;
2768
+ reason?: string;
2769
+ output?: unknown;
2770
+ modified?: boolean;
2771
+ schemaId?: string;
2772
+ patternScan?: {
2773
+ severity?: "low" | "medium" | "high" | "critical";
2774
+ detected?: boolean;
2775
+ patterns?: {
2776
+ type?: "regex" | "keyword" | "semantic";
2777
+ pattern?: string;
2778
+ description?: string;
2779
+ severity?: "low" | "medium" | "high" | "critical";
2780
+ matches?: string[];
2781
+ }[];
2782
+ };
2783
+ };
2784
+ piiChecks?: {
2785
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
2786
+ containsPII?: boolean;
2787
+ piiTypes?: string[];
2788
+ modifiedData?: unknown;
2789
+ }[];
2790
+ sanitizedOutput?: unknown;
2791
+ }, {
2792
+ valid?: boolean;
2793
+ reason?: string;
2794
+ warnings?: string[];
2795
+ inferenceValidations?: {
2796
+ valid?: boolean;
2797
+ reason?: string;
2798
+ requiredLevel?: InferenceLevel;
2799
+ agentLevel?: InferenceLevel;
2800
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2801
+ }[];
2802
+ outputValidation?: {
2803
+ valid?: boolean;
2804
+ reason?: string;
2805
+ output?: unknown;
2806
+ modified?: boolean;
2807
+ schemaId?: string;
2808
+ patternScan?: {
2809
+ severity?: "low" | "medium" | "high" | "critical";
2810
+ detected?: boolean;
2811
+ patterns?: {
2812
+ type?: "regex" | "keyword" | "semantic";
2813
+ pattern?: string;
2814
+ description?: string;
2815
+ severity?: "low" | "medium" | "high" | "critical";
2816
+ matches?: string[];
2817
+ }[];
2818
+ };
2819
+ };
2820
+ piiChecks?: {
2821
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
2822
+ containsPII?: boolean;
2823
+ piiTypes?: string[];
2824
+ modifiedData?: unknown;
2825
+ }[];
2826
+ sanitizedOutput?: unknown;
2827
+ }>;
2828
+ /**
2829
+ * Complete semantic validation result
2830
+ */
2831
+ export interface SemanticValidationResult {
2832
+ /** Whether interaction is valid */
2833
+ valid: boolean;
2834
+ /** Interaction ID */
2835
+ interactionId: string;
2836
+ /** Agent DID */
2837
+ agentDid: string;
2838
+ /** Pre-action result */
2839
+ preAction?: PreActionResult;
2840
+ /** Post-action result */
2841
+ postAction?: PostActionResult;
2842
+ /** Overall reason for failure */
2843
+ reason?: string;
2844
+ /** Validation timestamp */
2845
+ validatedAt: Date;
2846
+ /** Validation duration in ms */
2847
+ durationMs: number;
2848
+ }
2849
+ export declare const SemanticValidationResultSchema: z.ZodObject<{
2850
+ valid: z.ZodBoolean;
2851
+ interactionId: z.ZodString;
2852
+ agentDid: z.ZodString;
2853
+ preAction: z.ZodOptional<z.ZodObject<{
2854
+ allowed: z.ZodBoolean;
2855
+ reason: z.ZodOptional<z.ZodString>;
2856
+ instructionValidation: z.ZodOptional<z.ZodObject<{
2857
+ valid: z.ZodBoolean;
2858
+ method: z.ZodOptional<z.ZodEnum<["exact-match", "template-match", "signed-source"]>>;
2859
+ templateId: z.ZodOptional<z.ZodString>;
2860
+ reason: z.ZodOptional<z.ZodString>;
2861
+ instructionHash: z.ZodOptional<z.ZodString>;
2862
+ extractedParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
2863
+ }, "strip", z.ZodTypeAny, {
2864
+ valid?: boolean;
2865
+ method?: "exact-match" | "template-match" | "signed-source";
2866
+ reason?: string;
2867
+ templateId?: string;
2868
+ instructionHash?: string;
2869
+ extractedParams?: Record<string, unknown>;
2870
+ }, {
2871
+ valid?: boolean;
2872
+ method?: "exact-match" | "template-match" | "signed-source";
2873
+ reason?: string;
2874
+ templateId?: string;
2875
+ instructionHash?: string;
2876
+ extractedParams?: Record<string, unknown>;
2877
+ }>>;
2878
+ contextValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2879
+ valid: z.ZodBoolean;
2880
+ reason: z.ZodOptional<z.ZodString>;
2881
+ providerValidation: z.ZodOptional<z.ZodObject<{
2882
+ valid: z.ZodBoolean;
2883
+ providerId: z.ZodString;
2884
+ trustTier: z.ZodOptional<z.ZodNativeEnum<typeof TrustTier>>;
2885
+ reason: z.ZodOptional<z.ZodString>;
2886
+ blocked: z.ZodOptional<z.ZodBoolean>;
2887
+ }, "strip", z.ZodTypeAny, {
2888
+ valid?: boolean;
2889
+ providerId?: string;
2890
+ reason?: string;
2891
+ blocked?: boolean;
2892
+ trustTier?: TrustTier;
2893
+ }, {
2894
+ valid?: boolean;
2895
+ providerId?: string;
2896
+ reason?: string;
2897
+ blocked?: boolean;
2898
+ trustTier?: TrustTier;
2899
+ }>>;
2900
+ contentValidation: z.ZodOptional<z.ZodObject<{
2901
+ valid: z.ZodBoolean;
2902
+ signatureValid: z.ZodOptional<z.ZodBoolean>;
2903
+ ageSeconds: z.ZodOptional<z.ZodNumber>;
2904
+ format: z.ZodOptional<z.ZodString>;
2905
+ reason: z.ZodOptional<z.ZodString>;
2906
+ }, "strip", z.ZodTypeAny, {
2907
+ valid?: boolean;
2908
+ reason?: string;
2909
+ format?: string;
2910
+ signatureValid?: boolean;
2911
+ ageSeconds?: number;
2912
+ }, {
2913
+ valid?: boolean;
2914
+ reason?: string;
2915
+ format?: string;
2916
+ signatureValid?: boolean;
2917
+ ageSeconds?: number;
2918
+ }>>;
2919
+ injectionScan: z.ZodOptional<z.ZodObject<{
2920
+ detected: z.ZodBoolean;
2921
+ patterns: z.ZodArray<z.ZodString, "many">;
2922
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
2923
+ descriptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
2924
+ }, "strip", z.ZodTypeAny, {
2925
+ severity?: "low" | "medium" | "high" | "critical";
2926
+ detected?: boolean;
2927
+ patterns?: string[];
2928
+ descriptions?: string[];
2929
+ }, {
2930
+ severity?: "low" | "medium" | "high" | "critical";
2931
+ detected?: boolean;
2932
+ patterns?: string[];
2933
+ descriptions?: string[];
2934
+ }>>;
2935
+ }, "strip", z.ZodTypeAny, {
2936
+ valid?: boolean;
2937
+ reason?: string;
2938
+ providerValidation?: {
2939
+ valid?: boolean;
2940
+ providerId?: string;
2941
+ reason?: string;
2942
+ blocked?: boolean;
2943
+ trustTier?: TrustTier;
2944
+ };
2945
+ contentValidation?: {
2946
+ valid?: boolean;
2947
+ reason?: string;
2948
+ format?: string;
2949
+ signatureValid?: boolean;
2950
+ ageSeconds?: number;
2951
+ };
2952
+ injectionScan?: {
2953
+ severity?: "low" | "medium" | "high" | "critical";
2954
+ detected?: boolean;
2955
+ patterns?: string[];
2956
+ descriptions?: string[];
2957
+ };
2958
+ }, {
2959
+ valid?: boolean;
2960
+ reason?: string;
2961
+ providerValidation?: {
2962
+ valid?: boolean;
2963
+ providerId?: string;
2964
+ reason?: string;
2965
+ blocked?: boolean;
2966
+ trustTier?: TrustTier;
2967
+ };
2968
+ contentValidation?: {
2969
+ valid?: boolean;
2970
+ reason?: string;
2971
+ format?: string;
2972
+ signatureValid?: boolean;
2973
+ ageSeconds?: number;
2974
+ };
2975
+ injectionScan?: {
2976
+ severity?: "low" | "medium" | "high" | "critical";
2977
+ detected?: boolean;
2978
+ patterns?: string[];
2979
+ descriptions?: string[];
2980
+ };
2981
+ }>, "many">>;
2982
+ inferenceValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
2983
+ valid: z.ZodBoolean;
2984
+ reason: z.ZodOptional<z.ZodString>;
2985
+ requiredLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2986
+ agentLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
2987
+ restrictedDomain: z.ZodOptional<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>>;
2988
+ }, "strip", z.ZodTypeAny, {
2989
+ valid?: boolean;
2990
+ reason?: string;
2991
+ requiredLevel?: InferenceLevel;
2992
+ agentLevel?: InferenceLevel;
2993
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
2994
+ }, {
2995
+ valid?: boolean;
2996
+ reason?: string;
2997
+ requiredLevel?: InferenceLevel;
2998
+ agentLevel?: InferenceLevel;
2999
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3000
+ }>, "many">>;
3001
+ channelEnforcement: z.ZodOptional<z.ZodObject<{
3002
+ allowed: z.ZodBoolean;
3003
+ action: z.ZodEnum<["pass", "block", "sanitize", "warn"]>;
3004
+ reason: z.ZodOptional<z.ZodString>;
3005
+ sanitizedContent: z.ZodOptional<z.ZodString>;
3006
+ strippedInstructions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3007
+ }, "strip", z.ZodTypeAny, {
3008
+ reason?: string;
3009
+ action?: "warn" | "block" | "pass" | "sanitize";
3010
+ allowed?: boolean;
3011
+ sanitizedContent?: string;
3012
+ strippedInstructions?: string[];
3013
+ }, {
3014
+ reason?: string;
3015
+ action?: "warn" | "block" | "pass" | "sanitize";
3016
+ allowed?: boolean;
3017
+ sanitizedContent?: string;
3018
+ strippedInstructions?: string[];
3019
+ }>>;
3020
+ warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3021
+ }, "strip", z.ZodTypeAny, {
3022
+ reason?: string;
3023
+ allowed?: boolean;
3024
+ warnings?: string[];
3025
+ instructionValidation?: {
3026
+ valid?: boolean;
3027
+ method?: "exact-match" | "template-match" | "signed-source";
3028
+ reason?: string;
3029
+ templateId?: string;
3030
+ instructionHash?: string;
3031
+ extractedParams?: Record<string, unknown>;
3032
+ };
3033
+ contextValidations?: {
3034
+ valid?: boolean;
3035
+ reason?: string;
3036
+ providerValidation?: {
3037
+ valid?: boolean;
3038
+ providerId?: string;
3039
+ reason?: string;
3040
+ blocked?: boolean;
3041
+ trustTier?: TrustTier;
3042
+ };
3043
+ contentValidation?: {
3044
+ valid?: boolean;
3045
+ reason?: string;
3046
+ format?: string;
3047
+ signatureValid?: boolean;
3048
+ ageSeconds?: number;
3049
+ };
3050
+ injectionScan?: {
3051
+ severity?: "low" | "medium" | "high" | "critical";
3052
+ detected?: boolean;
3053
+ patterns?: string[];
3054
+ descriptions?: string[];
3055
+ };
3056
+ }[];
3057
+ inferenceValidations?: {
3058
+ valid?: boolean;
3059
+ reason?: string;
3060
+ requiredLevel?: InferenceLevel;
3061
+ agentLevel?: InferenceLevel;
3062
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3063
+ }[];
3064
+ channelEnforcement?: {
3065
+ reason?: string;
3066
+ action?: "warn" | "block" | "pass" | "sanitize";
3067
+ allowed?: boolean;
3068
+ sanitizedContent?: string;
3069
+ strippedInstructions?: string[];
3070
+ };
3071
+ }, {
3072
+ reason?: string;
3073
+ allowed?: boolean;
3074
+ warnings?: string[];
3075
+ instructionValidation?: {
3076
+ valid?: boolean;
3077
+ method?: "exact-match" | "template-match" | "signed-source";
3078
+ reason?: string;
3079
+ templateId?: string;
3080
+ instructionHash?: string;
3081
+ extractedParams?: Record<string, unknown>;
3082
+ };
3083
+ contextValidations?: {
3084
+ valid?: boolean;
3085
+ reason?: string;
3086
+ providerValidation?: {
3087
+ valid?: boolean;
3088
+ providerId?: string;
3089
+ reason?: string;
3090
+ blocked?: boolean;
3091
+ trustTier?: TrustTier;
3092
+ };
3093
+ contentValidation?: {
3094
+ valid?: boolean;
3095
+ reason?: string;
3096
+ format?: string;
3097
+ signatureValid?: boolean;
3098
+ ageSeconds?: number;
3099
+ };
3100
+ injectionScan?: {
3101
+ severity?: "low" | "medium" | "high" | "critical";
3102
+ detected?: boolean;
3103
+ patterns?: string[];
3104
+ descriptions?: string[];
3105
+ };
3106
+ }[];
3107
+ inferenceValidations?: {
3108
+ valid?: boolean;
3109
+ reason?: string;
3110
+ requiredLevel?: InferenceLevel;
3111
+ agentLevel?: InferenceLevel;
3112
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3113
+ }[];
3114
+ channelEnforcement?: {
3115
+ reason?: string;
3116
+ action?: "warn" | "block" | "pass" | "sanitize";
3117
+ allowed?: boolean;
3118
+ sanitizedContent?: string;
3119
+ strippedInstructions?: string[];
3120
+ };
3121
+ }>>;
3122
+ postAction: z.ZodOptional<z.ZodObject<{
3123
+ valid: z.ZodBoolean;
3124
+ reason: z.ZodOptional<z.ZodString>;
3125
+ outputValidation: z.ZodOptional<z.ZodObject<{
3126
+ valid: z.ZodBoolean;
3127
+ modified: z.ZodOptional<z.ZodBoolean>;
3128
+ output: z.ZodOptional<z.ZodUnknown>;
3129
+ schemaId: z.ZodOptional<z.ZodString>;
3130
+ reason: z.ZodOptional<z.ZodString>;
3131
+ patternScan: z.ZodOptional<z.ZodObject<{
3132
+ detected: z.ZodBoolean;
3133
+ patterns: z.ZodArray<z.ZodObject<{
3134
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
3135
+ pattern: z.ZodString;
3136
+ description: z.ZodString;
3137
+ matches: z.ZodArray<z.ZodString, "many">;
3138
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
3139
+ }, "strip", z.ZodTypeAny, {
3140
+ type?: "regex" | "keyword" | "semantic";
3141
+ pattern?: string;
3142
+ description?: string;
3143
+ severity?: "low" | "medium" | "high" | "critical";
3144
+ matches?: string[];
3145
+ }, {
3146
+ type?: "regex" | "keyword" | "semantic";
3147
+ pattern?: string;
3148
+ description?: string;
3149
+ severity?: "low" | "medium" | "high" | "critical";
3150
+ matches?: string[];
3151
+ }>, "many">;
3152
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
3153
+ }, "strip", z.ZodTypeAny, {
3154
+ severity?: "low" | "medium" | "high" | "critical";
3155
+ detected?: boolean;
3156
+ patterns?: {
3157
+ type?: "regex" | "keyword" | "semantic";
3158
+ pattern?: string;
3159
+ description?: string;
3160
+ severity?: "low" | "medium" | "high" | "critical";
3161
+ matches?: string[];
3162
+ }[];
3163
+ }, {
3164
+ severity?: "low" | "medium" | "high" | "critical";
3165
+ detected?: boolean;
3166
+ patterns?: {
3167
+ type?: "regex" | "keyword" | "semantic";
3168
+ pattern?: string;
3169
+ description?: string;
3170
+ severity?: "low" | "medium" | "high" | "critical";
3171
+ matches?: string[];
3172
+ }[];
3173
+ }>>;
3174
+ }, "strip", z.ZodTypeAny, {
3175
+ valid?: boolean;
3176
+ reason?: string;
3177
+ output?: unknown;
3178
+ modified?: boolean;
3179
+ schemaId?: string;
3180
+ patternScan?: {
3181
+ severity?: "low" | "medium" | "high" | "critical";
3182
+ detected?: boolean;
3183
+ patterns?: {
3184
+ type?: "regex" | "keyword" | "semantic";
3185
+ pattern?: string;
3186
+ description?: string;
3187
+ severity?: "low" | "medium" | "high" | "critical";
3188
+ matches?: string[];
3189
+ }[];
3190
+ };
3191
+ }, {
3192
+ valid?: boolean;
3193
+ reason?: string;
3194
+ output?: unknown;
3195
+ modified?: boolean;
3196
+ schemaId?: string;
3197
+ patternScan?: {
3198
+ severity?: "low" | "medium" | "high" | "critical";
3199
+ detected?: boolean;
3200
+ patterns?: {
3201
+ type?: "regex" | "keyword" | "semantic";
3202
+ pattern?: string;
3203
+ description?: string;
3204
+ severity?: "low" | "medium" | "high" | "critical";
3205
+ matches?: string[];
3206
+ }[];
3207
+ };
3208
+ }>>;
3209
+ inferenceValidations: z.ZodOptional<z.ZodArray<z.ZodObject<{
3210
+ valid: z.ZodBoolean;
3211
+ reason: z.ZodOptional<z.ZodString>;
3212
+ requiredLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
3213
+ agentLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
3214
+ restrictedDomain: z.ZodOptional<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>>;
3215
+ }, "strip", z.ZodTypeAny, {
3216
+ valid?: boolean;
3217
+ reason?: string;
3218
+ requiredLevel?: InferenceLevel;
3219
+ agentLevel?: InferenceLevel;
3220
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3221
+ }, {
3222
+ valid?: boolean;
3223
+ reason?: string;
3224
+ requiredLevel?: InferenceLevel;
3225
+ agentLevel?: InferenceLevel;
3226
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3227
+ }>, "many">>;
3228
+ piiChecks: z.ZodOptional<z.ZodArray<z.ZodObject<{
3229
+ containsPII: z.ZodBoolean;
3230
+ piiTypes: z.ZodArray<z.ZodString, "many">;
3231
+ action: z.ZodEnum<["allowed", "blocked", "redacted", "hashed"]>;
3232
+ modifiedData: z.ZodOptional<z.ZodUnknown>;
3233
+ }, "strip", z.ZodTypeAny, {
3234
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3235
+ containsPII?: boolean;
3236
+ piiTypes?: string[];
3237
+ modifiedData?: unknown;
3238
+ }, {
3239
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3240
+ containsPII?: boolean;
3241
+ piiTypes?: string[];
3242
+ modifiedData?: unknown;
3243
+ }>, "many">>;
3244
+ sanitizedOutput: z.ZodOptional<z.ZodUnknown>;
3245
+ warnings: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3246
+ }, "strip", z.ZodTypeAny, {
3247
+ valid?: boolean;
3248
+ reason?: string;
3249
+ warnings?: string[];
3250
+ inferenceValidations?: {
3251
+ valid?: boolean;
3252
+ reason?: string;
3253
+ requiredLevel?: InferenceLevel;
3254
+ agentLevel?: InferenceLevel;
3255
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3256
+ }[];
3257
+ outputValidation?: {
3258
+ valid?: boolean;
3259
+ reason?: string;
3260
+ output?: unknown;
3261
+ modified?: boolean;
3262
+ schemaId?: string;
3263
+ patternScan?: {
3264
+ severity?: "low" | "medium" | "high" | "critical";
3265
+ detected?: boolean;
3266
+ patterns?: {
3267
+ type?: "regex" | "keyword" | "semantic";
3268
+ pattern?: string;
3269
+ description?: string;
3270
+ severity?: "low" | "medium" | "high" | "critical";
3271
+ matches?: string[];
3272
+ }[];
3273
+ };
3274
+ };
3275
+ piiChecks?: {
3276
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3277
+ containsPII?: boolean;
3278
+ piiTypes?: string[];
3279
+ modifiedData?: unknown;
3280
+ }[];
3281
+ sanitizedOutput?: unknown;
3282
+ }, {
3283
+ valid?: boolean;
3284
+ reason?: string;
3285
+ warnings?: string[];
3286
+ inferenceValidations?: {
3287
+ valid?: boolean;
3288
+ reason?: string;
3289
+ requiredLevel?: InferenceLevel;
3290
+ agentLevel?: InferenceLevel;
3291
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3292
+ }[];
3293
+ outputValidation?: {
3294
+ valid?: boolean;
3295
+ reason?: string;
3296
+ output?: unknown;
3297
+ modified?: boolean;
3298
+ schemaId?: string;
3299
+ patternScan?: {
3300
+ severity?: "low" | "medium" | "high" | "critical";
3301
+ detected?: boolean;
3302
+ patterns?: {
3303
+ type?: "regex" | "keyword" | "semantic";
3304
+ pattern?: string;
3305
+ description?: string;
3306
+ severity?: "low" | "medium" | "high" | "critical";
3307
+ matches?: string[];
3308
+ }[];
3309
+ };
3310
+ };
3311
+ piiChecks?: {
3312
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3313
+ containsPII?: boolean;
3314
+ piiTypes?: string[];
3315
+ modifiedData?: unknown;
3316
+ }[];
3317
+ sanitizedOutput?: unknown;
3318
+ }>>;
3319
+ reason: z.ZodOptional<z.ZodString>;
3320
+ validatedAt: z.ZodDate;
3321
+ durationMs: z.ZodNumber;
3322
+ }, "strip", z.ZodTypeAny, {
3323
+ valid?: boolean;
3324
+ reason?: string;
3325
+ durationMs?: number;
3326
+ agentDid?: string;
3327
+ preAction?: {
3328
+ reason?: string;
3329
+ allowed?: boolean;
3330
+ warnings?: string[];
3331
+ instructionValidation?: {
3332
+ valid?: boolean;
3333
+ method?: "exact-match" | "template-match" | "signed-source";
3334
+ reason?: string;
3335
+ templateId?: string;
3336
+ instructionHash?: string;
3337
+ extractedParams?: Record<string, unknown>;
3338
+ };
3339
+ contextValidations?: {
3340
+ valid?: boolean;
3341
+ reason?: string;
3342
+ providerValidation?: {
3343
+ valid?: boolean;
3344
+ providerId?: string;
3345
+ reason?: string;
3346
+ blocked?: boolean;
3347
+ trustTier?: TrustTier;
3348
+ };
3349
+ contentValidation?: {
3350
+ valid?: boolean;
3351
+ reason?: string;
3352
+ format?: string;
3353
+ signatureValid?: boolean;
3354
+ ageSeconds?: number;
3355
+ };
3356
+ injectionScan?: {
3357
+ severity?: "low" | "medium" | "high" | "critical";
3358
+ detected?: boolean;
3359
+ patterns?: string[];
3360
+ descriptions?: string[];
3361
+ };
3362
+ }[];
3363
+ inferenceValidations?: {
3364
+ valid?: boolean;
3365
+ reason?: string;
3366
+ requiredLevel?: InferenceLevel;
3367
+ agentLevel?: InferenceLevel;
3368
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3369
+ }[];
3370
+ channelEnforcement?: {
3371
+ reason?: string;
3372
+ action?: "warn" | "block" | "pass" | "sanitize";
3373
+ allowed?: boolean;
3374
+ sanitizedContent?: string;
3375
+ strippedInstructions?: string[];
3376
+ };
3377
+ };
3378
+ postAction?: {
3379
+ valid?: boolean;
3380
+ reason?: string;
3381
+ warnings?: string[];
3382
+ inferenceValidations?: {
3383
+ valid?: boolean;
3384
+ reason?: string;
3385
+ requiredLevel?: InferenceLevel;
3386
+ agentLevel?: InferenceLevel;
3387
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3388
+ }[];
3389
+ outputValidation?: {
3390
+ valid?: boolean;
3391
+ reason?: string;
3392
+ output?: unknown;
3393
+ modified?: boolean;
3394
+ schemaId?: string;
3395
+ patternScan?: {
3396
+ severity?: "low" | "medium" | "high" | "critical";
3397
+ detected?: boolean;
3398
+ patterns?: {
3399
+ type?: "regex" | "keyword" | "semantic";
3400
+ pattern?: string;
3401
+ description?: string;
3402
+ severity?: "low" | "medium" | "high" | "critical";
3403
+ matches?: string[];
3404
+ }[];
3405
+ };
3406
+ };
3407
+ piiChecks?: {
3408
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3409
+ containsPII?: boolean;
3410
+ piiTypes?: string[];
3411
+ modifiedData?: unknown;
3412
+ }[];
3413
+ sanitizedOutput?: unknown;
3414
+ };
3415
+ interactionId?: string;
3416
+ validatedAt?: Date;
3417
+ }, {
3418
+ valid?: boolean;
3419
+ reason?: string;
3420
+ durationMs?: number;
3421
+ agentDid?: string;
3422
+ preAction?: {
3423
+ reason?: string;
3424
+ allowed?: boolean;
3425
+ warnings?: string[];
3426
+ instructionValidation?: {
3427
+ valid?: boolean;
3428
+ method?: "exact-match" | "template-match" | "signed-source";
3429
+ reason?: string;
3430
+ templateId?: string;
3431
+ instructionHash?: string;
3432
+ extractedParams?: Record<string, unknown>;
3433
+ };
3434
+ contextValidations?: {
3435
+ valid?: boolean;
3436
+ reason?: string;
3437
+ providerValidation?: {
3438
+ valid?: boolean;
3439
+ providerId?: string;
3440
+ reason?: string;
3441
+ blocked?: boolean;
3442
+ trustTier?: TrustTier;
3443
+ };
3444
+ contentValidation?: {
3445
+ valid?: boolean;
3446
+ reason?: string;
3447
+ format?: string;
3448
+ signatureValid?: boolean;
3449
+ ageSeconds?: number;
3450
+ };
3451
+ injectionScan?: {
3452
+ severity?: "low" | "medium" | "high" | "critical";
3453
+ detected?: boolean;
3454
+ patterns?: string[];
3455
+ descriptions?: string[];
3456
+ };
3457
+ }[];
3458
+ inferenceValidations?: {
3459
+ valid?: boolean;
3460
+ reason?: string;
3461
+ requiredLevel?: InferenceLevel;
3462
+ agentLevel?: InferenceLevel;
3463
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3464
+ }[];
3465
+ channelEnforcement?: {
3466
+ reason?: string;
3467
+ action?: "warn" | "block" | "pass" | "sanitize";
3468
+ allowed?: boolean;
3469
+ sanitizedContent?: string;
3470
+ strippedInstructions?: string[];
3471
+ };
3472
+ };
3473
+ postAction?: {
3474
+ valid?: boolean;
3475
+ reason?: string;
3476
+ warnings?: string[];
3477
+ inferenceValidations?: {
3478
+ valid?: boolean;
3479
+ reason?: string;
3480
+ requiredLevel?: InferenceLevel;
3481
+ agentLevel?: InferenceLevel;
3482
+ restrictedDomain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3483
+ }[];
3484
+ outputValidation?: {
3485
+ valid?: boolean;
3486
+ reason?: string;
3487
+ output?: unknown;
3488
+ modified?: boolean;
3489
+ schemaId?: string;
3490
+ patternScan?: {
3491
+ severity?: "low" | "medium" | "high" | "critical";
3492
+ detected?: boolean;
3493
+ patterns?: {
3494
+ type?: "regex" | "keyword" | "semantic";
3495
+ pattern?: string;
3496
+ description?: string;
3497
+ severity?: "low" | "medium" | "high" | "critical";
3498
+ matches?: string[];
3499
+ }[];
3500
+ };
3501
+ };
3502
+ piiChecks?: {
3503
+ action?: "blocked" | "redacted" | "allowed" | "hashed";
3504
+ containsPII?: boolean;
3505
+ piiTypes?: string[];
3506
+ modifiedData?: unknown;
3507
+ }[];
3508
+ sanitizedOutput?: unknown;
3509
+ };
3510
+ interactionId?: string;
3511
+ validatedAt?: Date;
3512
+ }>;
3513
+ /**
3514
+ * Semantic governance configuration for creating credentials
3515
+ */
3516
+ export interface SemanticGovernanceConfig {
3517
+ /** Instruction integrity configuration */
3518
+ instructionIntegrity?: Partial<InstructionIntegrity>;
3519
+ /** Output binding configuration */
3520
+ outputBinding?: Partial<OutputBinding>;
3521
+ /** Inference scope configuration */
3522
+ inferenceScope?: Partial<InferenceScope>;
3523
+ /** Context authentication configuration */
3524
+ contextAuthentication?: Partial<ContextAuthenticationRequirements>;
3525
+ /** Dual-channel configuration */
3526
+ dualChannel?: Partial<DualChannelConfig>;
3527
+ }
3528
+ export declare const SemanticGovernanceConfigSchema: z.ZodObject<{
3529
+ instructionIntegrity: z.ZodOptional<z.ZodObject<{
3530
+ allowedInstructionHashes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3531
+ instructionTemplates: z.ZodOptional<z.ZodArray<z.ZodObject<{
3532
+ id: z.ZodString;
3533
+ hash: z.ZodString;
3534
+ description: z.ZodString;
3535
+ parameterSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
3536
+ }, "strip", z.ZodTypeAny, {
3537
+ id?: string;
3538
+ description?: string;
3539
+ hash?: string;
3540
+ parameterSchema?: Record<string, unknown>;
3541
+ }, {
3542
+ id?: string;
3543
+ description?: string;
3544
+ hash?: string;
3545
+ parameterSchema?: Record<string, unknown>;
3546
+ }>, "many">>;
3547
+ instructionSource: z.ZodOptional<z.ZodObject<{
3548
+ allowedSources: z.ZodArray<z.ZodString, "many">;
3549
+ requireSignature: z.ZodBoolean;
3550
+ }, "strip", z.ZodTypeAny, {
3551
+ allowedSources?: string[];
3552
+ requireSignature?: boolean;
3553
+ }, {
3554
+ allowedSources?: string[];
3555
+ requireSignature?: boolean;
3556
+ }>>;
3557
+ }, "strip", z.ZodTypeAny, {
3558
+ allowedInstructionHashes?: string[];
3559
+ instructionTemplates?: {
3560
+ id?: string;
3561
+ description?: string;
3562
+ hash?: string;
3563
+ parameterSchema?: Record<string, unknown>;
3564
+ }[];
3565
+ instructionSource?: {
3566
+ allowedSources?: string[];
3567
+ requireSignature?: boolean;
3568
+ };
3569
+ }, {
3570
+ allowedInstructionHashes?: string[];
3571
+ instructionTemplates?: {
3572
+ id?: string;
3573
+ description?: string;
3574
+ hash?: string;
3575
+ parameterSchema?: Record<string, unknown>;
3576
+ }[];
3577
+ instructionSource?: {
3578
+ allowedSources?: string[];
3579
+ requireSignature?: boolean;
3580
+ };
3581
+ }>>;
3582
+ outputBinding: z.ZodOptional<z.ZodObject<{
3583
+ allowedSchemas: z.ZodOptional<z.ZodArray<z.ZodObject<{
3584
+ id: z.ZodString;
3585
+ description: z.ZodString;
3586
+ jsonSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
3587
+ }, "strip", z.ZodTypeAny, {
3588
+ id?: string;
3589
+ description?: string;
3590
+ jsonSchema?: Record<string, unknown>;
3591
+ }, {
3592
+ id?: string;
3593
+ description?: string;
3594
+ jsonSchema?: Record<string, unknown>;
3595
+ }>, "many">>;
3596
+ prohibitedPatterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
3597
+ type: z.ZodEnum<["regex", "keyword", "semantic"]>;
3598
+ pattern: z.ZodString;
3599
+ description: z.ZodString;
3600
+ severity: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
3601
+ }, "strip", z.ZodTypeAny, {
3602
+ type?: "regex" | "keyword" | "semantic";
3603
+ pattern?: string;
3604
+ description?: string;
3605
+ severity?: "low" | "medium" | "high" | "critical";
3606
+ }, {
3607
+ type?: "regex" | "keyword" | "semantic";
3608
+ pattern?: string;
3609
+ description?: string;
3610
+ severity?: "low" | "medium" | "high" | "critical";
3611
+ }>, "many">>;
3612
+ allowedExternalEndpoints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3613
+ blockedExternalEndpoints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3614
+ }, "strip", z.ZodTypeAny, {
3615
+ allowedSchemas?: {
3616
+ id?: string;
3617
+ description?: string;
3618
+ jsonSchema?: Record<string, unknown>;
3619
+ }[];
3620
+ prohibitedPatterns?: {
3621
+ type?: "regex" | "keyword" | "semantic";
3622
+ pattern?: string;
3623
+ description?: string;
3624
+ severity?: "low" | "medium" | "high" | "critical";
3625
+ }[];
3626
+ allowedExternalEndpoints?: string[];
3627
+ blockedExternalEndpoints?: string[];
3628
+ }, {
3629
+ allowedSchemas?: {
3630
+ id?: string;
3631
+ description?: string;
3632
+ jsonSchema?: Record<string, unknown>;
3633
+ }[];
3634
+ prohibitedPatterns?: {
3635
+ type?: "regex" | "keyword" | "semantic";
3636
+ pattern?: string;
3637
+ description?: string;
3638
+ severity?: "low" | "medium" | "high" | "critical";
3639
+ }[];
3640
+ allowedExternalEndpoints?: string[];
3641
+ blockedExternalEndpoints?: string[];
3642
+ }>>;
3643
+ inferenceScope: z.ZodOptional<z.ZodObject<{
3644
+ globalLevel: z.ZodOptional<z.ZodNativeEnum<typeof InferenceLevel>>;
3645
+ domainOverrides: z.ZodOptional<z.ZodArray<z.ZodObject<{
3646
+ domain: z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>;
3647
+ level: z.ZodNativeEnum<typeof InferenceLevel>;
3648
+ reason: z.ZodString;
3649
+ }, "strip", z.ZodTypeAny, {
3650
+ level?: InferenceLevel;
3651
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3652
+ reason?: string;
3653
+ }, {
3654
+ level?: InferenceLevel;
3655
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3656
+ reason?: string;
3657
+ }>, "many">>;
3658
+ derivedKnowledgeHandling: z.ZodOptional<z.ZodObject<{
3659
+ retention: z.ZodEnum<["none", "session", "persistent"]>;
3660
+ allowedRecipients: z.ZodArray<z.ZodString, "many">;
3661
+ crossContextSharing: z.ZodBoolean;
3662
+ }, "strip", z.ZodTypeAny, {
3663
+ retention?: "none" | "session" | "persistent";
3664
+ allowedRecipients?: string[];
3665
+ crossContextSharing?: boolean;
3666
+ }, {
3667
+ retention?: "none" | "session" | "persistent";
3668
+ allowedRecipients?: string[];
3669
+ crossContextSharing?: boolean;
3670
+ }>>;
3671
+ piiInference: z.ZodOptional<z.ZodObject<{
3672
+ allowed: z.ZodBoolean;
3673
+ handling: z.ZodEnum<["block", "redact", "hash"]>;
3674
+ }, "strip", z.ZodTypeAny, {
3675
+ allowed?: boolean;
3676
+ handling?: "block" | "hash" | "redact";
3677
+ }, {
3678
+ allowed?: boolean;
3679
+ handling?: "block" | "hash" | "redact";
3680
+ }>>;
3681
+ }, "strip", z.ZodTypeAny, {
3682
+ globalLevel?: InferenceLevel;
3683
+ domainOverrides?: {
3684
+ level?: InferenceLevel;
3685
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3686
+ reason?: string;
3687
+ }[];
3688
+ derivedKnowledgeHandling?: {
3689
+ retention?: "none" | "session" | "persistent";
3690
+ allowedRecipients?: string[];
3691
+ crossContextSharing?: boolean;
3692
+ };
3693
+ piiInference?: {
3694
+ allowed?: boolean;
3695
+ handling?: "block" | "hash" | "redact";
3696
+ };
3697
+ }, {
3698
+ globalLevel?: InferenceLevel;
3699
+ domainOverrides?: {
3700
+ level?: InferenceLevel;
3701
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3702
+ reason?: string;
3703
+ }[];
3704
+ derivedKnowledgeHandling?: {
3705
+ retention?: "none" | "session" | "persistent";
3706
+ allowedRecipients?: string[];
3707
+ crossContextSharing?: boolean;
3708
+ };
3709
+ piiInference?: {
3710
+ allowed?: boolean;
3711
+ handling?: "block" | "hash" | "redact";
3712
+ };
3713
+ }>>;
3714
+ contextAuthentication: z.ZodOptional<z.ZodObject<{
3715
+ required: z.ZodOptional<z.ZodBoolean>;
3716
+ minTrustTier: z.ZodOptional<z.ZodNativeEnum<typeof TrustTier>>;
3717
+ requiredDomains: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>>;
3718
+ allowedProviders: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3719
+ blockedProviders: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3720
+ contentIntegrity: z.ZodOptional<z.ZodObject<{
3721
+ signatureRequired: z.ZodBoolean;
3722
+ maxAge: z.ZodNumber;
3723
+ allowedFormats: z.ZodArray<z.ZodString, "many">;
3724
+ }, "strip", z.ZodTypeAny, {
3725
+ maxAge?: number;
3726
+ signatureRequired?: boolean;
3727
+ allowedFormats?: string[];
3728
+ }, {
3729
+ maxAge?: number;
3730
+ signatureRequired?: boolean;
3731
+ allowedFormats?: string[];
3732
+ }>>;
3733
+ }, "strip", z.ZodTypeAny, {
3734
+ required?: boolean;
3735
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
3736
+ minTrustTier?: TrustTier;
3737
+ allowedProviders?: string[];
3738
+ blockedProviders?: string[];
3739
+ contentIntegrity?: {
3740
+ maxAge?: number;
3741
+ signatureRequired?: boolean;
3742
+ allowedFormats?: string[];
3743
+ };
3744
+ }, {
3745
+ required?: boolean;
3746
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
3747
+ minTrustTier?: TrustTier;
3748
+ allowedProviders?: string[];
3749
+ blockedProviders?: string[];
3750
+ contentIntegrity?: {
3751
+ maxAge?: number;
3752
+ signatureRequired?: boolean;
3753
+ allowedFormats?: string[];
3754
+ };
3755
+ }>>;
3756
+ dualChannel: z.ZodOptional<z.ZodObject<{
3757
+ enforced: z.ZodOptional<z.ZodBoolean>;
3758
+ controlPlaneSources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
3759
+ dataPlaneTreatment: z.ZodOptional<z.ZodEnum<["block", "sanitize", "warn"]>>;
3760
+ }, "strip", z.ZodTypeAny, {
3761
+ enforced?: boolean;
3762
+ controlPlaneSources?: string[];
3763
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
3764
+ }, {
3765
+ enforced?: boolean;
3766
+ controlPlaneSources?: string[];
3767
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
3768
+ }>>;
3769
+ }, "strip", z.ZodTypeAny, {
3770
+ instructionIntegrity?: {
3771
+ allowedInstructionHashes?: string[];
3772
+ instructionTemplates?: {
3773
+ id?: string;
3774
+ description?: string;
3775
+ hash?: string;
3776
+ parameterSchema?: Record<string, unknown>;
3777
+ }[];
3778
+ instructionSource?: {
3779
+ allowedSources?: string[];
3780
+ requireSignature?: boolean;
3781
+ };
3782
+ };
3783
+ outputBinding?: {
3784
+ allowedSchemas?: {
3785
+ id?: string;
3786
+ description?: string;
3787
+ jsonSchema?: Record<string, unknown>;
3788
+ }[];
3789
+ prohibitedPatterns?: {
3790
+ type?: "regex" | "keyword" | "semantic";
3791
+ pattern?: string;
3792
+ description?: string;
3793
+ severity?: "low" | "medium" | "high" | "critical";
3794
+ }[];
3795
+ allowedExternalEndpoints?: string[];
3796
+ blockedExternalEndpoints?: string[];
3797
+ };
3798
+ inferenceScope?: {
3799
+ globalLevel?: InferenceLevel;
3800
+ domainOverrides?: {
3801
+ level?: InferenceLevel;
3802
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3803
+ reason?: string;
3804
+ }[];
3805
+ derivedKnowledgeHandling?: {
3806
+ retention?: "none" | "session" | "persistent";
3807
+ allowedRecipients?: string[];
3808
+ crossContextSharing?: boolean;
3809
+ };
3810
+ piiInference?: {
3811
+ allowed?: boolean;
3812
+ handling?: "block" | "hash" | "redact";
3813
+ };
3814
+ };
3815
+ contextAuthentication?: {
3816
+ required?: boolean;
3817
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
3818
+ minTrustTier?: TrustTier;
3819
+ allowedProviders?: string[];
3820
+ blockedProviders?: string[];
3821
+ contentIntegrity?: {
3822
+ maxAge?: number;
3823
+ signatureRequired?: boolean;
3824
+ allowedFormats?: string[];
3825
+ };
3826
+ };
3827
+ dualChannel?: {
3828
+ enforced?: boolean;
3829
+ controlPlaneSources?: string[];
3830
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
3831
+ };
3832
+ }, {
3833
+ instructionIntegrity?: {
3834
+ allowedInstructionHashes?: string[];
3835
+ instructionTemplates?: {
3836
+ id?: string;
3837
+ description?: string;
3838
+ hash?: string;
3839
+ parameterSchema?: Record<string, unknown>;
3840
+ }[];
3841
+ instructionSource?: {
3842
+ allowedSources?: string[];
3843
+ requireSignature?: boolean;
3844
+ };
3845
+ };
3846
+ outputBinding?: {
3847
+ allowedSchemas?: {
3848
+ id?: string;
3849
+ description?: string;
3850
+ jsonSchema?: Record<string, unknown>;
3851
+ }[];
3852
+ prohibitedPatterns?: {
3853
+ type?: "regex" | "keyword" | "semantic";
3854
+ pattern?: string;
3855
+ description?: string;
3856
+ severity?: "low" | "medium" | "high" | "critical";
3857
+ }[];
3858
+ allowedExternalEndpoints?: string[];
3859
+ blockedExternalEndpoints?: string[];
3860
+ };
3861
+ inferenceScope?: {
3862
+ globalLevel?: InferenceLevel;
3863
+ domainOverrides?: {
3864
+ level?: InferenceLevel;
3865
+ domain?: "H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S";
3866
+ reason?: string;
3867
+ }[];
3868
+ derivedKnowledgeHandling?: {
3869
+ retention?: "none" | "session" | "persistent";
3870
+ allowedRecipients?: string[];
3871
+ crossContextSharing?: boolean;
3872
+ };
3873
+ piiInference?: {
3874
+ allowed?: boolean;
3875
+ handling?: "block" | "hash" | "redact";
3876
+ };
3877
+ };
3878
+ contextAuthentication?: {
3879
+ required?: boolean;
3880
+ requiredDomains?: ("H" | "A" | "B" | "C" | "D" | "F" | "E" | "G" | "I" | "S")[];
3881
+ minTrustTier?: TrustTier;
3882
+ allowedProviders?: string[];
3883
+ blockedProviders?: string[];
3884
+ contentIntegrity?: {
3885
+ maxAge?: number;
3886
+ signatureRequired?: boolean;
3887
+ allowedFormats?: string[];
3888
+ };
3889
+ };
3890
+ dualChannel?: {
3891
+ enforced?: boolean;
3892
+ controlPlaneSources?: string[];
3893
+ dataPlaneTreatment?: "warn" | "block" | "sanitize";
3894
+ };
3895
+ }>;
3896
+ /**
3897
+ * Default instruction integrity configuration
3898
+ */
3899
+ export declare const DEFAULT_INSTRUCTION_INTEGRITY: InstructionIntegrity;
3900
+ /**
3901
+ * Default output binding configuration
3902
+ */
3903
+ export declare const DEFAULT_OUTPUT_BINDING: OutputBinding;
3904
+ /**
3905
+ * Default inference scope configuration
3906
+ */
3907
+ export declare const DEFAULT_INFERENCE_SCOPE: InferenceScope;
3908
+ /**
3909
+ * Default context authentication configuration
3910
+ */
3911
+ export declare const DEFAULT_CONTEXT_AUTHENTICATION: ContextAuthenticationRequirements;
3912
+ /**
3913
+ * Default dual-channel configuration
3914
+ */
3915
+ export declare const DEFAULT_DUAL_CHANNEL: DualChannelConfig;
3916
+ //# sourceMappingURL=types.d.ts.map