@ztothez/design-engineering 2.0.0

package/dist/src/interface-trust/loader.js

@@ -0,0 +1,21 @@
+import { readFile, stat } from "node:fs/promises";
+import { extname, resolve } from "node:path";
+import { parse } from "yaml";
+import { interfaceTrustContractSchema } from "./schema.js";
+const MAX_CONTRACT_BYTES = 2 * 1024 * 1024;
+export async function loadInterfaceTrustContract(path) {
+    const resolvedPath = resolve(path);
+    if (!/^\.(?:json|ya?ml)$/i.test(extname(resolvedPath))) {
+        throw new Error("Interface trust contracts must end in .json, .yaml, or .yml");
+    }
+    const fileStats = await stat(resolvedPath);
+    if (!fileStats.isFile())
+        throw new Error("Interface trust contract path is not a regular file");
+    if (fileStats.size > MAX_CONTRACT_BYTES) {
+        throw new Error(`Interface trust contract exceeds ${MAX_CONTRACT_BYTES} bytes`);
+    }
+    const text = await readFile(resolvedPath, "utf8");
+    const content = resolvedPath.endsWith(".json") ? JSON.parse(text) : parse(text);
+    return interfaceTrustContractSchema.parse(content);
+}
+//# sourceMappingURL=loader.js.map

package/dist/src/interface-trust/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/interface-trust/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,4BAA4B,EAA+B,MAAM,aAAa,CAAC;AAExF,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAChG,IAAI,SAAS,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oCAAoC,kBAAkB,QAAQ,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAY,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzF,OAAO,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC"}

package/dist/src/interface-trust/report.d.ts

@@ -0,0 +1,2 @@
+import type { InterfaceTrustReport } from "./schema.js";
+export declare function formatInterfaceTrustReport(report: InterfaceTrustReport): string;

package/dist/src/interface-trust/report.js

@@ -0,0 +1,26 @@
+export function formatInterfaceTrustReport(report) {
+    const coveredScenarios = Object.entries(report.coverage.scenarios)
+        .filter(([, covered]) => covered)
+        .map(([scenario]) => scenario)
+        .join(", ");
+    const lines = [
+        "# ZtotheZ Interface Trust Validation",
+        "",
+        `- Contract: \`${report.contractId}\``,
+        `- Product: ${report.product}`,
+        `- Source: \`${report.sourcePath}\``,
+        `- Coverage: ${report.coverage.sources} sources, ${report.coverage.states} states, ${report.coverage.claims} claims, ${report.coverage.actions} actions`,
+        `- Scenarios: ${coveredScenarios || "none"}`,
+        `- Findings: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.info} info`,
+        `- Result: ${report.passed ? "PASS" : "FAIL"}`,
+    ];
+    if (report.findings.length > 0) {
+        lines.push("", "## Findings");
+        for (const finding of report.findings) {
+            lines.push("", `### ${finding.severity.toUpperCase()}: ${finding.ruleId}`, "", `- Path: \`${finding.path}\``, `- Finding: ${finding.message}`, `- Remediation: ${finding.remediation}`);
+        }
+    }
+    lines.push("", "## Limitations", "", ...report.limitations.map((entry) => `- ${entry}`));
+    return lines.join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/src/interface-trust/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/interface-trust/report.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,0BAA0B,CAAC,MAA4B;IACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;SAChC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,KAAK,GAAG;QACZ,sCAAsC;QACtC,EAAE;QACF,iBAAiB,MAAM,CAAC,UAAU,IAAI;QACtC,cAAc,MAAM,CAAC,OAAO,EAAE;QAC9B,eAAe,MAAM,CAAC,UAAU,IAAI;QACpC,eAAe,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY,MAAM,CAAC,QAAQ,CAAC,OAAO,UAAU;QACxJ,gBAAgB,gBAAgB,IAAI,MAAM,EAAE;QAC5C,eAAe,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO;QAC/G,aAAa,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;KAC/C,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,EAC1D,EAAE,EACF,aAAa,OAAO,CAAC,IAAI,IAAI,EAC7B,cAAc,OAAO,CAAC,OAAO,EAAE,EAC/B,kBAAkB,OAAO,CAAC,WAAW,EAAE,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/interface-trust/schema.d.ts

@@ -0,0 +1,299 @@
+import { z } from "zod";
+export declare const dataModeSchema: z.ZodEnum<{
+    demo: "demo";
+    live: "live";
+    hybrid: "hybrid";
+    imported: "imported";
+    cached: "cached";
+}>;
+export declare const connectionSchema: z.ZodEnum<{
+    disconnected: "disconnected";
+    unknown: "unknown";
+    checking: "checking";
+    connected: "connected";
+    degraded: "degraded";
+}>;
+export declare const resultOriginSchema: z.ZodEnum<{
+    live: "live";
+    imported: "imported";
+    cached: "cached";
+    simulated: "simulated";
+}>;
+export declare const trustScenarioSchema: z.ZodEnum<{
+    disconnected: "disconnected";
+    stale: "stale";
+    fallback: "fallback";
+    demo: "demo";
+    live: "live";
+}>;
+export declare const trustSourceKindSchema: z.ZodEnum<{
+    "user-input": "user-input";
+    configuration: "configuration";
+    "runtime-probe": "runtime-probe";
+    "authenticated-api": "authenticated-api";
+    "runtime-processing": "runtime-processing";
+    "import-record": "import-record";
+    "cache-record": "cache-record";
+    "demo-fixture": "demo-fixture";
+    "local-simulation": "local-simulation";
+}>;
+export declare const trustClaimKindSchema: z.ZodEnum<{
+    limitation: "limitation";
+    environment: "environment";
+    scope: "scope";
+    freshness: "freshness";
+    "data-mode": "data-mode";
+    "connection-status": "connection-status";
+    "result-origin": "result-origin";
+    "processing-boundary": "processing-boundary";
+    "interface-availability": "interface-availability";
+    "backend-availability": "backend-availability";
+}>;
+export declare const trustLocationSchema: z.ZodEnum<{
+    error: "error";
+    export: "export";
+    loading: "loading";
+    result: "result";
+    history: "history";
+    shell: "shell";
+    "before-action": "before-action";
+}>;
+export declare const interfaceTrustContractSchema: z.ZodObject<{
+    version: z.ZodLiteral<"1.0">;
+    id: z.ZodString;
+    product: z.ZodString;
+    preparedAt: z.ZodString;
+    preparedBy: z.ZodObject<{
+        type: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            mixed: "mixed";
+        }>;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    sources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            "user-input": "user-input";
+            configuration: "configuration";
+            "runtime-probe": "runtime-probe";
+            "authenticated-api": "authenticated-api";
+            "runtime-processing": "runtime-processing";
+            "import-record": "import-record";
+            "cache-record": "cache-record";
+            "demo-fixture": "demo-fixture";
+            "local-simulation": "local-simulation";
+        }>;
+        authority: z.ZodEnum<{
+            runtime: "runtime";
+            fixture: "fixture";
+            configuration: "configuration";
+            cache: "cache";
+            user: "user";
+        }>;
+        description: z.ZodString;
+        evidence: z.ZodOptional<z.ZodString>;
+        checkedAt: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    states: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        scenario: z.ZodEnum<{
+            disconnected: "disconnected";
+            stale: "stale";
+            fallback: "fallback";
+            demo: "demo";
+            live: "live";
+        }>;
+        dataMode: z.ZodEnum<{
+            demo: "demo";
+            live: "live";
+            hybrid: "hybrid";
+            imported: "imported";
+            cached: "cached";
+        }>;
+        connection: z.ZodEnum<{
+            disconnected: "disconnected";
+            unknown: "unknown";
+            checking: "checking";
+            connected: "connected";
+            degraded: "degraded";
+        }>;
+        result: z.ZodObject<{
+            availability: z.ZodEnum<{
+                partial: "partial";
+                failed: "failed";
+                none: "none";
+                available: "available";
+                pending: "pending";
+            }>;
+            origin: z.ZodOptional<z.ZodEnum<{
+                live: "live";
+                imported: "imported";
+                cached: "cached";
+                simulated: "simulated";
+            }>>;
+        }, z.core.$strict>;
+        freshness: z.ZodObject<{
+            status: z.ZodEnum<{
+                stale: "stale";
+                unknown: "unknown";
+                "not-applicable": "not-applicable";
+                current: "current";
+            }>;
+            observedAt: z.ZodOptional<z.ZodString>;
+            timezone: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        environment: z.ZodString;
+        scope: z.ZodString;
+        limitations: z.ZodArray<z.ZodString>;
+        sourceRefs: z.ZodArray<z.ZodString>;
+        recoveryAction: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    claims: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        state: z.ZodString;
+        kind: z.ZodEnum<{
+            limitation: "limitation";
+            environment: "environment";
+            scope: "scope";
+            freshness: "freshness";
+            "data-mode": "data-mode";
+            "connection-status": "connection-status";
+            "result-origin": "result-origin";
+            "processing-boundary": "processing-boundary";
+            "interface-availability": "interface-availability";
+            "backend-availability": "backend-availability";
+        }>;
+        text: z.ZodString;
+        classification: z.ZodEnum<{
+            unknown: "unknown";
+            verified: "verified";
+            demonstration: "demonstration";
+        }>;
+        sourceRefs: z.ZodArray<z.ZodString>;
+        locations: z.ZodArray<z.ZodEnum<{
+            error: "error";
+            export: "export";
+            loading: "loading";
+            result: "result";
+            history: "history";
+            shell: "shell";
+            "before-action": "before-action";
+        }>>;
+        visibility: z.ZodEnum<{
+            persistent: "persistent";
+            contextual: "contextual";
+        }>;
+    }, z.core.$strict>>;
+    actions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        outcome: z.ZodString;
+        consequential: z.ZodBoolean;
+        stateRefs: z.ZodArray<z.ZodString>;
+        disclosureClaimRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    records: z.ZodObject<{
+        history: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            fields: z.ZodArray<z.ZodEnum<{
+                environment: "environment";
+                limitations: "limitations";
+                scope: "scope";
+                freshness: "freshness";
+                "data-mode": "data-mode";
+                "result-origin": "result-origin";
+                connection: "connection";
+            }>>;
+            stateRefs: z.ZodArray<z.ZodString>;
+            disclosureClaimRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        export: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            fields: z.ZodArray<z.ZodEnum<{
+                environment: "environment";
+                limitations: "limitations";
+                scope: "scope";
+                freshness: "freshness";
+                "data-mode": "data-mode";
+                "result-origin": "result-origin";
+                connection: "connection";
+            }>>;
+            stateRefs: z.ZodArray<z.ZodString>;
+            disclosureClaimRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    security: z.ZodObject<{
+        allowsEmbeddedCredentials: z.ZodLiteral<false>;
+        credentialSources: z.ZodArray<z.ZodEnum<{
+            environment: "environment";
+            none: "none";
+            "secret-manager": "secret-manager";
+            oauth: "oauth";
+            "user-runtime": "user-runtime";
+        }>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const interfaceTrustFindingSchema: z.ZodObject<{
+    ruleId: z.ZodString;
+    severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+        info: "info";
+    }>;
+    path: z.ZodString;
+    message: z.ZodString;
+    remediation: z.ZodString;
+}, z.core.$strict>;
+export declare const interfaceTrustReportSchema: z.ZodObject<{
+    version: z.ZodString;
+    generatedAt: z.ZodString;
+    sourcePath: z.ZodString;
+    contractId: z.ZodString;
+    product: z.ZodString;
+    findings: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        severity: z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+            info: "info";
+        }>;
+        path: z.ZodString;
+        message: z.ZodString;
+        remediation: z.ZodString;
+    }, z.core.$strict>>;
+    coverage: z.ZodObject<{
+        sources: z.ZodNumber;
+        states: z.ZodNumber;
+        claims: z.ZodNumber;
+        actions: z.ZodNumber;
+        scenarios: z.ZodRecord<z.ZodEnum<{
+            disconnected: "disconnected";
+            stale: "stale";
+            fallback: "fallback";
+            demo: "demo";
+            live: "live";
+        }>, z.ZodBoolean>;
+    }, z.core.$strip>;
+    traceability: z.ZodArray<z.ZodObject<{
+        claim: z.ZodString;
+        state: z.ZodString;
+        classification: z.ZodEnum<{
+            unknown: "unknown";
+            verified: "verified";
+            demonstration: "demonstration";
+        }>;
+        sourceRefs: z.ZodArray<z.ZodString>;
+        traced: z.ZodBoolean;
+    }, z.core.$strict>>;
+    summary: z.ZodObject<{
+        errors: z.ZodNumber;
+        warnings: z.ZodNumber;
+        info: z.ZodNumber;
+    }, z.core.$strip>;
+    passed: z.ZodBoolean;
+    limitations: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type InterfaceTrustContract = z.infer<typeof interfaceTrustContractSchema>;
+export type InterfaceTrustFinding = z.infer<typeof interfaceTrustFindingSchema>;
+export type InterfaceTrustReport = z.infer<typeof interfaceTrustReportSchema>;

package/dist/src/interface-trust/schema.js

@@ -0,0 +1,238 @@
+import { z } from "zod";
+const idSchema = z.string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/);
+const boundedText = (maximum) => z.string().trim().min(1).max(maximum);
+const pathText = boundedText(1_024);
+export const dataModeSchema = z.enum(["demo", "live", "hybrid", "imported", "cached"]);
+export const connectionSchema = z.enum([
+    "unknown",
+    "checking",
+    "connected",
+    "degraded",
+    "disconnected",
+]);
+export const resultOriginSchema = z.enum(["live", "simulated", "imported", "cached"]);
+export const trustScenarioSchema = z.enum([
+    "demo",
+    "live",
+    "fallback",
+    "stale",
+    "disconnected",
+]);
+export const trustSourceKindSchema = z.enum([
+    "runtime-probe",
+    "authenticated-api",
+    "runtime-processing",
+    "user-input",
+    "import-record",
+    "cache-record",
+    "demo-fixture",
+    "local-simulation",
+    "configuration",
+]);
+export const trustClaimKindSchema = z.enum([
+    "data-mode",
+    "connection-status",
+    "result-origin",
+    "freshness",
+    "environment",
+    "scope",
+    "processing-boundary",
+    "limitation",
+    "interface-availability",
+    "backend-availability",
+]);
+export const trustLocationSchema = z.enum([
+    "shell",
+    "before-action",
+    "loading",
+    "result",
+    "error",
+    "history",
+    "export",
+]);
+const trustSourceSchema = z
+    .object({
+    id: idSchema,
+    kind: trustSourceKindSchema,
+    authority: z.enum(["runtime", "user", "fixture", "cache", "configuration"]),
+    description: boundedText(512),
+    evidence: pathText.optional(),
+    checkedAt: z.string().datetime({ offset: true }).optional(),
+})
+    .strict();
+const freshnessSchema = z
+    .object({
+    status: z.enum(["current", "stale", "unknown", "not-applicable"]),
+    observedAt: z.string().datetime({ offset: true }).optional(),
+    timezone: boundedText(128).optional(),
+})
+    .strict()
+    .superRefine((freshness, context) => {
+    const timestampRequired = freshness.status === "current" || freshness.status === "stale";
+    if (timestampRequired && !freshness.observedAt) {
+        context.addIssue({
+            code: "custom",
+            path: ["observedAt"],
+            message: "Current and stale freshness states require an offset timestamp.",
+        });
+    }
+    if (timestampRequired && !freshness.timezone) {
+        context.addIssue({
+            code: "custom",
+            path: ["timezone"],
+            message: "Current and stale freshness states require an explicit timezone.",
+        });
+    }
+});
+const trustStateSchema = z
+    .object({
+    id: idSchema,
+    scenario: trustScenarioSchema,
+    dataMode: dataModeSchema,
+    connection: connectionSchema,
+    result: z
+        .object({
+        availability: z.enum(["none", "pending", "available", "partial", "failed"]),
+        origin: resultOriginSchema.optional(),
+    })
+        .strict(),
+    freshness: freshnessSchema,
+    environment: boundedText(256),
+    scope: boundedText(512),
+    limitations: z.array(boundedText(512)).max(30),
+    sourceRefs: z.array(idSchema).min(1).max(50),
+    recoveryAction: boundedText(512).optional(),
+})
+    .strict()
+    .superRefine((state, context) => {
+    const resultRequiresOrigin = state.result.availability === "available" || state.result.availability === "partial";
+    if (resultRequiresOrigin && !state.result.origin) {
+        context.addIssue({
+            code: "custom",
+            path: ["result", "origin"],
+            message: "Available and partial results require an explicit origin.",
+        });
+    }
+    if (!resultRequiresOrigin && state.result.origin) {
+        context.addIssue({
+            code: "custom",
+            path: ["result", "origin"],
+            message: "Only available or partial results may declare an origin.",
+        });
+    }
+});
+const trustClaimSchema = z
+    .object({
+    id: idSchema,
+    state: idSchema,
+    kind: trustClaimKindSchema,
+    text: boundedText(1_024),
+    classification: z.enum(["verified", "demonstration", "unknown"]),
+    sourceRefs: z.array(idSchema).max(50),
+    locations: z.array(trustLocationSchema).min(1).max(7),
+    visibility: z.enum(["persistent", "contextual"]),
+})
+    .strict();
+const trustActionSchema = z
+    .object({
+    id: idSchema,
+    label: boundedText(160),
+    outcome: boundedText(512),
+    consequential: z.boolean(),
+    stateRefs: z.array(idSchema).min(1).max(50),
+    disclosureClaimRefs: z.array(idSchema).max(200),
+})
+    .strict();
+const provenanceFieldSchema = z.enum([
+    "data-mode",
+    "connection",
+    "result-origin",
+    "freshness",
+    "environment",
+    "scope",
+    "limitations",
+]);
+const provenanceRecordSchema = z
+    .object({
+    enabled: z.boolean(),
+    fields: z.array(provenanceFieldSchema).max(7),
+    stateRefs: z.array(idSchema).max(50),
+    disclosureClaimRefs: z.array(idSchema).max(500),
+})
+    .strict();
+export const interfaceTrustContractSchema = z
+    .object({
+    version: z.literal("1.0"),
+    id: idSchema,
+    product: boundedText(256),
+    preparedAt: z.string().datetime({ offset: true }),
+    preparedBy: z
+        .object({
+        type: z.enum(["agent", "human", "mixed"]),
+        name: boundedText(256),
+    })
+        .strict(),
+    sources: z.array(trustSourceSchema).min(1).max(500),
+    states: z.array(trustStateSchema).min(5).max(500),
+    claims: z.array(trustClaimSchema).min(1).max(5_000),
+    actions: z.array(trustActionSchema).max(500),
+    records: z
+        .object({
+        history: provenanceRecordSchema,
+        export: provenanceRecordSchema,
+    })
+        .strict(),
+    security: z
+        .object({
+        allowsEmbeddedCredentials: z.literal(false),
+        credentialSources: z
+            .array(z.enum(["environment", "secret-manager", "oauth", "user-runtime", "none"]))
+            .min(1)
+            .max(5),
+    })
+        .strict(),
+})
+    .strict();
+export const interfaceTrustFindingSchema = z
+    .object({
+    ruleId: z.string().regex(/^ZTDE-TRUST-[0-9]{3}$/),
+    severity: z.enum(["error", "warning", "info"]),
+    path: z.string(),
+    message: z.string(),
+    remediation: z.string(),
+})
+    .strict();
+export const interfaceTrustReportSchema = z
+    .object({
+    version: z.string(),
+    generatedAt: z.string(),
+    sourcePath: z.string(),
+    contractId: z.string(),
+    product: z.string(),
+    findings: z.array(interfaceTrustFindingSchema),
+    coverage: z.object({
+        sources: z.number().int().nonnegative(),
+        states: z.number().int().nonnegative(),
+        claims: z.number().int().nonnegative(),
+        actions: z.number().int().nonnegative(),
+        scenarios: z.record(trustScenarioSchema, z.boolean()),
+    }),
+    traceability: z.array(z
+        .object({
+        claim: z.string(),
+        state: z.string(),
+        classification: z.enum(["verified", "demonstration", "unknown"]),
+        sourceRefs: z.array(z.string()),
+        traced: z.boolean(),
+    })
+        .strict()),
+    summary: z.object({
+        errors: z.number().int().nonnegative(),
+        warnings: z.number().int().nonnegative(),
+        info: z.number().int().nonnegative(),
+    }),
+    passed: z.boolean(),
+    limitations: z.array(z.string()),
+})
+    .strict();
+//# sourceMappingURL=schema.js.map

package/dist/src/interface-trust/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/interface-trust/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/D,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC/E,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,SAAS;IACT,UAAU;IACV,WAAW;IACX,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,MAAM;IACN,MAAM;IACN,UAAU;IACV,OAAO;IACP,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,eAAe;IACf,mBAAmB;IACnB,oBAAoB;IACpB,YAAY;IACZ,eAAe;IACf,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,aAAa;IACb,OAAO;IACP,qBAAqB;IACrB,YAAY;IACZ,wBAAwB;IACxB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,OAAO;IACP,eAAe;IACf,SAAS;IACT,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3E,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;IAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5D,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAClC,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC;IACzF,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,iEAAiE;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,mBAAmB;IAC7B,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3E,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,MAAM,EAAE;IACX,SAAS,EAAE,eAAe;IAC1B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5C,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC;IAClH,IAAI,oBAAoB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAC1B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAC1B,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;IACxB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IAChE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;IACzB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,WAAW;IACX,YAAY;IACZ,eAAe;IACf,WAAW;IACX,aAAa;IACb,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,OAAO,EAAE,sBAAsB;QAC/B,MAAM,EAAE,sBAAsB;KAC/B,CAAC;SACD,MAAM,EAAE;IACX,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3C,iBAAiB,EAAE,CAAC;aACjB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;aACjF,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,CAAC,CAAC;KACV,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACtD,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,KAAK,CACnB,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAChE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC;SACD,MAAM,EAAE,CACZ;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/src/interface-trust/validator.d.ts

@@ -0,0 +1,2 @@
+import type { InterfaceTrustContract, InterfaceTrustReport } from "./schema.js";
+export declare function validateInterfaceTrustContract(contract: InterfaceTrustContract, sourcePath: string): InterfaceTrustReport;