ega-v9 1.0.2 → 1.0.4

package/dist/cli/activation-success-message.d.ts

@@ -0,0 +1,8 @@
+export type EGAActivationSuccessMessageInput = {
+    contactName: string;
+    companyName: string;
+    workEmail: string;
+    issuedAt: string;
+    expiresAt: string;
+};
+export declare function buildActivationSuccessMessage(input: EGAActivationSuccessMessageInput): string;

package/dist/cli/activation-success-message.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildActivationSuccessMessage = buildActivationSuccessMessage;
+function buildActivationSuccessMessage(input) {
+    return [
+        "",
+        "✓ Evaluation License Activated",
+        "",
+        `Contact Name: ${input.contactName}`,
+        `Company Name: ${input.companyName}`,
+        `Work Email:   ${input.workEmail}`,
+        "",
+        `Issued:  ${input.issuedAt}`,
+        `Expires: ${input.expiresAt}`,
+        "",
+        "✓ EGA V9 is now activated.",
+        "",
+        "You can start using Runtime Governance immediately.",
+        "",
+        "Need help or want to collaborate?",
+        "",
+        "Community Support",
+        "",
+        "GitHub Issues",
+        "https://github.com/paibyun9/EGA-V9/issues",
+        "",
+        "Use GitHub Issues for questions, bug reports,",
+        "feature requests, documentation feedback,",
+        "and independent reproducibility reports.",
+        "",
+        "Project Resources",
+        "",
+        "Live Demo",
+        "https://ega-v9.vercel.app/",
+        "",
+        "Official Website",
+        "https://lcm3.com/",
+        ""
+    ].join("\n");
+}

package/dist/cli/register-command.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EGARegisterCommandError = void 0;
 exports.runRegisterCommand = runRegisterCommand;
+const activation_success_message_1 = require("./activation-success-message");
 class EGARegisterCommandError extends Error {
     constructor(code, message) {
         super(`[${code}] ${message}`);
@@ -37,16 +38,6 @@ function formatDate(value) {
         .toISOString()
         .slice(0, 10);
 }
-function calculateDaysRemaining(expiresAt, now = new Date()) {
-    const expirationDate = new Date(expiresAt);
-    if (Number.isNaN(expirationDate.getTime())) {
-        return 0;
-    }
-    const dayMilliseconds = 24 * 60 * 60 * 1000;
-    return Math.max(0, Math.ceil((expirationDate.getTime() -
-        now.getTime()) /
-        dayMilliseconds));
-}
 async function runRegisterCommand(dependencies) {
     dependencies.write("");
     dependencies.write("Welcome to EGA V9");
@@ -87,16 +78,13 @@ async function runRegisterCommand(dependencies) {
         overwrite: dependencies.overwrite ??
             false
     });
-    dependencies.write("");
-    dependencies.write("✓ Evaluation License Activated");
-    dependencies.write("");
-    dependencies.write(`Issued: ${formatDate(license.issuedAt)}`);
-    dependencies.write(`Expires: ${formatDate(license.expiresAt)}`);
-    dependencies.write(`Days Remaining: ${calculateDaysRemaining(license.expiresAt)}`);
-    dependencies.write("");
-    dependencies.write(`License stored: ${licensePath}`);
-    dependencies.write("");
-    dependencies.write("Happy Building.");
+    dependencies.write((0, activation_success_message_1.buildActivationSuccessMessage)({
+        contactName,
+        companyName,
+        workEmail,
+        issuedAt: formatDate(license.issuedAt),
+        expiresAt: formatDate(license.expiresAt)
+    }));
     return {
         license,
         licensePath

package/dist/index.d.ts

@@ -155,7 +155,7 @@ type NextFunction = EGAGuardNext;
 type EGARequest = EGAGuardRequest;
 type EGAResponse = EGAGuardResponse;
 export declare class EGA {
-    private readonly options;
+    #private;
     private readonly eventLog;
     private eventSequence;
     private constructor();

package/dist/index.js

@@ -1,4 +1,16 @@
 "use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _EGA_options;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.evaluateRuntimeAdmission = exports.assertRuntimeLicenseAdmission = exports.EGARuntimeAdmissionError = exports.ega = exports.EGA = void 0;
 exports.verifyExecution = verifyExecution;
@@ -166,16 +178,17 @@ function validateGuardInvocation(req, res, next) {
 }
 class EGA {
     constructor(options = {}) {
+        _EGA_options.set(this, void 0);
         this.eventLog = [];
         this.eventSequence = 0;
-        this.options = {
+        __classPrivateFieldSet(this, _EGA_options, Object.freeze({
             appName: options.appName ?? "ega-v9-app",
             trustLevel: options.trustLevel ?? "supported",
             telemetry: options.telemetry ?? false,
             failClosed: options.failClosed ?? true,
             policyId: options.policyId ?? "default-policy",
             approvalThreshold: options.approvalThreshold ?? 70
-        };
+        }), "f");
     }
     static init(options = {}) {
         validateEGAOptions(options);
@@ -183,9 +196,10 @@ class EGA {
     }
     guard() {
         return (req, res, next) => {
+            (0, runtime_admission_provider_1.enforceRuntimeLicenseAdmission)();
             validateGuardInvocation(req, res, next);
             const requestId = (0, crypto_1.randomUUID)();
-            const clientIdentity = buildAnonymousClientIdentity(req, this.options.appName);
+            const clientIdentity = buildAnonymousClientIdentity(req, __classPrivateFieldGet(this, _EGA_options, "f").appName);
             const licenseState = evaluateLicenseState(req);
             const actualReplayRoot = this.createReplayRoot(req);
             const expectedReplayRoot = this.getExpectedReplayRoot(req);
@@ -194,7 +208,7 @@ class EGA {
                 timestamp: new Date().toISOString(),
                 requestId,
                 replayRoot: actualReplayRoot,
-                trustLevel: this.options.trustLevel,
+                trustLevel: __classPrivateFieldGet(this, _EGA_options, "f").trustLevel,
                 status: "verified",
                 clientIdentity,
                 licenseState
@@ -207,9 +221,9 @@ class EGA {
             const businessMetrics = collectBusinessMetrics(req.body);
             const trust = evaluateTrust({
                 isMismatch,
-                failClosed: this.options.failClosed,
+                failClosed: __classPrivateFieldGet(this, _EGA_options, "f").failClosed,
                 businessMetrics,
-                approvalThreshold: this.options.approvalThreshold
+                approvalThreshold: __classPrivateFieldGet(this, _EGA_options, "f").approvalThreshold
             });
             const businessGovernanceProfile = buildBusinessGovernanceProfile(businessMetrics, trust);
             const provenance = this.buildProvenanceGraph({
@@ -223,7 +237,7 @@ class EGA {
             const context = {
                 requestId,
                 replayRoot: actualReplayRoot,
-                trustLevel: this.options.trustLevel,
+                trustLevel: __classPrivateFieldGet(this, _EGA_options, "f").trustLevel,
                 status: isMismatch ? "contained" : "verified",
                 scorpLock: true,
                 clientIdentity,
@@ -236,10 +250,10 @@ class EGA {
                 },
                 containment: {
                     activated: isMismatch,
-                    mode: this.options.failClosed ? "fail-closed" : "observe",
+                    mode: __classPrivateFieldGet(this, _EGA_options, "f").failClosed ? "fail-closed" : "observe",
                     reason: isMismatch ? "replay root mismatch" : undefined,
                     quarantineId,
-                    executionAllowed: !isMismatch || !this.options.failClosed
+                    executionAllowed: !isMismatch || !__classPrivateFieldGet(this, _EGA_options, "f").failClosed
                 },
                 trust,
                 businessGovernanceProfile,
@@ -408,7 +422,7 @@ class EGA {
                         executionAllowed: context.containment.executionAllowed
                     }
                 });
-                if (this.options.failClosed) {
+                if (__classPrivateFieldGet(this, _EGA_options, "f").failClosed) {
                     this.recordEvent({
                         type: "execution.blocked",
                         timestamp: new Date().toISOString(),
@@ -498,7 +512,7 @@ class EGA {
     }
     createReplayRoot(req) {
         return this.replayRoot({
-            appName: this.options.appName,
+            appName: __classPrivateFieldGet(this, _EGA_options, "f").appName,
             method: req.method ?? "UNKNOWN",
             path: req.originalUrl ?? req.url ?? req.path ?? "/",
             body: req.body ?? null,
@@ -538,9 +552,9 @@ class EGA {
                 type: "policy",
                 label: "Policy",
                 data: {
-                    policyId: this.options.policyId,
+                    policyId: __classPrivateFieldGet(this, _EGA_options, "f").policyId,
                     scorpLock: true,
-                    failClosed: this.options.failClosed
+                    failClosed: __classPrivateFieldGet(this, _EGA_options, "f").failClosed
                 }
             },
             {
@@ -549,7 +563,7 @@ class EGA {
                 label: "Decision",
                 data: {
                     status: args.isMismatch ? "contained" : "verified",
-                    executionAllowed: !args.isMismatch || !this.options.failClosed
+                    executionAllowed: !args.isMismatch || !__classPrivateFieldGet(this, _EGA_options, "f").failClosed
                 }
             },
             {
@@ -601,6 +615,7 @@ class EGA {
     }
 }
 exports.EGA = EGA;
+_EGA_options = new WeakMap();
 function buildAnonymousClientIdentity(req, appName) {
     const headers = req.headers ?? {};
     const hostValue = headers.host ?? headers.Host;

package/dist/license/activation-required-message.d.ts

@@ -0,0 +1 @@
+export declare function buildActivationRequiredMessage(): string;

package/dist/license/activation-required-message.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildActivationRequiredMessage = buildActivationRequiredMessage;
+function buildActivationRequiredMessage() {
+    return [
+        "EGA V9 is installed but not activated.",
+        "",
+        "Activate your FREE 90-Day Evaluation License.",
+        "No credit card required.",
+        "",
+        "Run:",
+        "",
+        "    npx ega-v9 register"
+    ].join("\n");
+}

package/dist/license/public-key.d.ts

@@ -1,5 +1,14 @@
 import { KeyObject } from "crypto";
+export declare const EGA_V9_LICENSE_PUBLIC_KEY_FINGERPRINT_SHA256 = "2caf94d33728abd5b61919a230cc2ef142762f98da036c3e2a02dfcdc536377d";
 export declare class EGALicensePublicKeyError extends Error {
     constructor(message: string);
 }
+/**
+ * Resolution order:
+ *
+ * 1. EGA_V9_LICENSE_PUBLIC_KEY_PEM or explicit argument
+ *    for controlled development and testing.
+ * 2. Official EGA V9 Production Public Key bundled
+ *    with the SDK for normal customer activation.
+ */
 export declare function loadEvaluationLicensePublicKey(publicKeyPem?: string | undefined): KeyObject;

package/dist/license/public-key.js

@@ -1,8 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EGALicensePublicKeyError = void 0;
+exports.EGALicensePublicKeyError = exports.EGA_V9_LICENSE_PUBLIC_KEY_FINGERPRINT_SHA256 = void 0;
 exports.loadEvaluationLicensePublicKey = loadEvaluationLicensePublicKey;
 const crypto_1 = require("crypto");
+/**
+ * EGA V9 Production Root of Trust V1.
+ *
+ * Public verification material only.
+ * The corresponding Private Key must remain exclusively
+ * in the LCM License API secret environment.
+ */
+const OFFICIAL_EGA_V9_LICENSE_PUBLIC_KEY_PEM = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAXyuVTginxHK4uxGvwXxc3yMUvmNA4c+NJyIOLvEZx+4=\n-----END PUBLIC KEY-----";
+exports.EGA_V9_LICENSE_PUBLIC_KEY_FINGERPRINT_SHA256 = "2caf94d33728abd5b61919a230cc2ef142762f98da036c3e2a02dfcdc536377d";
 class EGALicensePublicKeyError extends Error {
     constructor(message) {
         super(`[EGA_LICENSE_PUBLIC_KEY] ${message}`);
@@ -12,16 +21,28 @@ class EGALicensePublicKeyError extends Error {
     }
 }
 exports.EGALicensePublicKeyError = EGALicensePublicKeyError;
+/**
+ * Resolution order:
+ *
+ * 1. EGA_V9_LICENSE_PUBLIC_KEY_PEM or explicit argument
+ *    for controlled development and testing.
+ * 2. Official EGA V9 Production Public Key bundled
+ *    with the SDK for normal customer activation.
+ */
 function loadEvaluationLicensePublicKey(publicKeyPem = process.env
     .EGA_V9_LICENSE_PUBLIC_KEY_PEM) {
-    if (typeof publicKeyPem !==
-        "string" ||
-        publicKeyPem.trim().length ===
-            0) {
-        throw new EGALicensePublicKeyError("The official EGA V9 Evaluation License public key is not configured.");
-    }
+    const selectedPublicKeyPem = typeof publicKeyPem === "string" &&
+        publicKeyPem.trim().length > 0
+        ? publicKeyPem.trim()
+        : OFFICIAL_EGA_V9_LICENSE_PUBLIC_KEY_PEM;
     try {
-        return (0, crypto_1.createPublicKey)(publicKeyPem);
+        const publicKey = (0, crypto_1.createPublicKey)(selectedPublicKeyPem);
+        if (publicKey.type !== "public" ||
+            publicKey.asymmetricKeyType !==
+                "ed25519") {
+            throw new Error("Unsupported Public Key type.");
+        }
+        return publicKey;
     }
     catch {
         throw new EGALicensePublicKeyError("The configured EGA V9 Evaluation License public key is invalid.");

package/package.json

@@ -1,18 +1,20 @@
 {
   "name": "ega-v9",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "EGA V9 TypeScript SDK for replay, provenance, containment, and SCORP LOCK governance.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "scripts/postinstall-message.cjs"
   ],
   "scripts": {
     "build": "tsc && node scripts/generate-esm-wrapper.cjs && node scripts/prepare-cli.cjs",
     "test": "npm run build && node ../../scripts/testing/run-v1-test-suite.cjs",
-    "dev": "tsc --watch"
+    "dev": "tsc --watch",
+    "postinstall": "node scripts/postinstall-message.cjs"
   },
   "keywords": [
     "ai-agents",

package/scripts/postinstall-message.cjs

@@ -0,0 +1,22 @@
+"use strict";
+
+const message = [
+  "",
+  "────────────────────────────────────────────────────────",
+  "",
+  "✓ EGA V9 installed successfully.",
+  "",
+  "EGA V9 is installed but not activated.",
+  "",
+  "Activate your FREE 90-Day Evaluation License.",
+  "No credit card required.",
+  "",
+  "Run:",
+  "",
+  "    npx ega-v9 register",
+  "",
+  "────────────────────────────────────────────────────────",
+  ""
+].join("\n");
+
+process.stdout.write(message);