orbit-agent-runtime 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (168) hide show
  1. package/CHANGELOG.md +750 -0
  2. package/LICENSE +201 -0
  3. package/README.md +492 -0
  4. package/README.zh-CN.md +389 -0
  5. package/benchmarks/README.md +24 -0
  6. package/benchmarks/gateway.mjs +68 -0
  7. package/benchmarks/pae.mjs +90 -0
  8. package/benchmarks/replay.mjs +51 -0
  9. package/benchmarks/run-all.mjs +24 -0
  10. package/benchmarks/wal.mjs +50 -0
  11. package/bin/orbit.mjs +523 -0
  12. package/dist/.tsbuildinfo +1 -0
  13. package/dist/demo-deepseek.d.ts +2 -0
  14. package/dist/demo-deepseek.d.ts.map +1 -0
  15. package/dist/demo-deepseek.js +66 -0
  16. package/dist/demo-deepseek.js.map +1 -0
  17. package/dist/demo-host.d.ts +2 -0
  18. package/dist/demo-host.d.ts.map +1 -0
  19. package/dist/demo-host.js +98 -0
  20. package/dist/demo-host.js.map +1 -0
  21. package/dist/demo-replay.d.ts +2 -0
  22. package/dist/demo-replay.d.ts.map +1 -0
  23. package/dist/demo-replay.js +68 -0
  24. package/dist/demo-replay.js.map +1 -0
  25. package/dist/src/core/orbitRuntimeHost.d.ts +349 -0
  26. package/dist/src/core/orbitRuntimeHost.d.ts.map +1 -0
  27. package/dist/src/core/orbitRuntimeHost.js +706 -0
  28. package/dist/src/core/orbitRuntimeHost.js.map +1 -0
  29. package/dist/src/index.d.ts +92 -0
  30. package/dist/src/index.d.ts.map +1 -0
  31. package/dist/src/index.js +226 -0
  32. package/dist/src/index.js.map +1 -0
  33. package/dist/test/audit_chain.test.d.ts +2 -0
  34. package/dist/test/audit_chain.test.d.ts.map +1 -0
  35. package/dist/test/audit_chain.test.js +283 -0
  36. package/dist/test/audit_chain.test.js.map +1 -0
  37. package/dist/test/channel_hub.test.d.ts +2 -0
  38. package/dist/test/channel_hub.test.d.ts.map +1 -0
  39. package/dist/test/channel_hub.test.js +66 -0
  40. package/dist/test/channel_hub.test.js.map +1 -0
  41. package/dist/test/cordis_adapter.test.d.ts +2 -0
  42. package/dist/test/cordis_adapter.test.d.ts.map +1 -0
  43. package/dist/test/cordis_adapter.test.js +280 -0
  44. package/dist/test/cordis_adapter.test.js.map +1 -0
  45. package/dist/test/cost_routing.test.d.ts +2 -0
  46. package/dist/test/cost_routing.test.d.ts.map +1 -0
  47. package/dist/test/cost_routing.test.js +31 -0
  48. package/dist/test/cost_routing.test.js.map +1 -0
  49. package/dist/test/domain_transaction.test.d.ts +2 -0
  50. package/dist/test/domain_transaction.test.d.ts.map +1 -0
  51. package/dist/test/domain_transaction.test.js +351 -0
  52. package/dist/test/domain_transaction.test.js.map +1 -0
  53. package/dist/test/file_channel.test.d.ts +2 -0
  54. package/dist/test/file_channel.test.d.ts.map +1 -0
  55. package/dist/test/file_channel.test.js +179 -0
  56. package/dist/test/file_channel.test.js.map +1 -0
  57. package/dist/test/gateway.test.d.ts +2 -0
  58. package/dist/test/gateway.test.d.ts.map +1 -0
  59. package/dist/test/gateway.test.js +548 -0
  60. package/dist/test/gateway.test.js.map +1 -0
  61. package/dist/test/governance_profile.test.d.ts +2 -0
  62. package/dist/test/governance_profile.test.d.ts.map +1 -0
  63. package/dist/test/governance_profile.test.js +214 -0
  64. package/dist/test/governance_profile.test.js.map +1 -0
  65. package/dist/test/governance_schema.test.d.ts +2 -0
  66. package/dist/test/governance_schema.test.d.ts.map +1 -0
  67. package/dist/test/governance_schema.test.js +200 -0
  68. package/dist/test/governance_schema.test.js.map +1 -0
  69. package/dist/test/host_integration.test.d.ts +2 -0
  70. package/dist/test/host_integration.test.d.ts.map +1 -0
  71. package/dist/test/host_integration.test.js +104 -0
  72. package/dist/test/host_integration.test.js.map +1 -0
  73. package/dist/test/host_journal_persistence.test.d.ts +2 -0
  74. package/dist/test/host_journal_persistence.test.d.ts.map +1 -0
  75. package/dist/test/host_journal_persistence.test.js +367 -0
  76. package/dist/test/host_journal_persistence.test.js.map +1 -0
  77. package/dist/test/impact_domain.test.d.ts +2 -0
  78. package/dist/test/impact_domain.test.d.ts.map +1 -0
  79. package/dist/test/impact_domain.test.js +48 -0
  80. package/dist/test/impact_domain.test.js.map +1 -0
  81. package/dist/test/injected_clock.test.d.ts +13 -0
  82. package/dist/test/injected_clock.test.d.ts.map +1 -0
  83. package/dist/test/injected_clock.test.js +200 -0
  84. package/dist/test/injected_clock.test.js.map +1 -0
  85. package/dist/test/isolation_domain.test.d.ts +2 -0
  86. package/dist/test/isolation_domain.test.d.ts.map +1 -0
  87. package/dist/test/isolation_domain.test.js +302 -0
  88. package/dist/test/isolation_domain.test.js.map +1 -0
  89. package/dist/test/journal_wal.test.d.ts +2 -0
  90. package/dist/test/journal_wal.test.d.ts.map +1 -0
  91. package/dist/test/journal_wal.test.js +622 -0
  92. package/dist/test/journal_wal.test.js.map +1 -0
  93. package/dist/test/mcp_adapter.test.d.ts +2 -0
  94. package/dist/test/mcp_adapter.test.d.ts.map +1 -0
  95. package/dist/test/mcp_adapter.test.js +440 -0
  96. package/dist/test/mcp_adapter.test.js.map +1 -0
  97. package/dist/test/openai_compat_channel.test.d.ts +2 -0
  98. package/dist/test/openai_compat_channel.test.d.ts.map +1 -0
  99. package/dist/test/openai_compat_channel.test.js +325 -0
  100. package/dist/test/openai_compat_channel.test.js.map +1 -0
  101. package/dist/test/openapi_adapter.test.d.ts +2 -0
  102. package/dist/test/openapi_adapter.test.d.ts.map +1 -0
  103. package/dist/test/openapi_adapter.test.js +270 -0
  104. package/dist/test/openapi_adapter.test.js.map +1 -0
  105. package/dist/test/orbit_cli.test.d.ts +2 -0
  106. package/dist/test/orbit_cli.test.d.ts.map +1 -0
  107. package/dist/test/orbit_cli.test.js +137 -0
  108. package/dist/test/orbit_cli.test.js.map +1 -0
  109. package/dist/test/pact_verifier.test.d.ts +2 -0
  110. package/dist/test/pact_verifier.test.d.ts.map +1 -0
  111. package/dist/test/pact_verifier.test.js +41 -0
  112. package/dist/test/pact_verifier.test.js.map +1 -0
  113. package/dist/test/pae_adapter.test.d.ts +2 -0
  114. package/dist/test/pae_adapter.test.d.ts.map +1 -0
  115. package/dist/test/pae_adapter.test.js +469 -0
  116. package/dist/test/pae_adapter.test.js.map +1 -0
  117. package/dist/test/plugin_sandbox_guard.test.d.ts +2 -0
  118. package/dist/test/plugin_sandbox_guard.test.d.ts.map +1 -0
  119. package/dist/test/plugin_sandbox_guard.test.js +57 -0
  120. package/dist/test/plugin_sandbox_guard.test.js.map +1 -0
  121. package/dist/test/rate_limit_behavior.test.d.ts +2 -0
  122. package/dist/test/rate_limit_behavior.test.d.ts.map +1 -0
  123. package/dist/test/rate_limit_behavior.test.js +85 -0
  124. package/dist/test/rate_limit_behavior.test.js.map +1 -0
  125. package/dist/test/replay_compat.test.d.ts +2 -0
  126. package/dist/test/replay_compat.test.d.ts.map +1 -0
  127. package/dist/test/replay_compat.test.js +1122 -0
  128. package/dist/test/replay_compat.test.js.map +1 -0
  129. package/dist/test/replay_engine.test.d.ts +2 -0
  130. package/dist/test/replay_engine.test.d.ts.map +1 -0
  131. package/dist/test/replay_engine.test.js +85 -0
  132. package/dist/test/replay_engine.test.js.map +1 -0
  133. package/dist/test/shell_channel.test.d.ts +2 -0
  134. package/dist/test/shell_channel.test.d.ts.map +1 -0
  135. package/dist/test/shell_channel.test.js +173 -0
  136. package/dist/test/shell_channel.test.js.map +1 -0
  137. package/dist/test/teardown_isolation.test.d.ts +10 -0
  138. package/dist/test/teardown_isolation.test.d.ts.map +1 -0
  139. package/dist/test/teardown_isolation.test.js +279 -0
  140. package/dist/test/teardown_isolation.test.js.map +1 -0
  141. package/dist/test/token_budget.test.d.ts +2 -0
  142. package/dist/test/token_budget.test.d.ts.map +1 -0
  143. package/dist/test/token_budget.test.js +113 -0
  144. package/dist/test/token_budget.test.js.map +1 -0
  145. package/dist/test/trace_journal.test.d.ts +2 -0
  146. package/dist/test/trace_journal.test.d.ts.map +1 -0
  147. package/dist/test/trace_journal.test.js +43 -0
  148. package/dist/test/trace_journal.test.js.map +1 -0
  149. package/dist/test/trace_journal_persistence.test.d.ts +2 -0
  150. package/dist/test/trace_journal_persistence.test.d.ts.map +1 -0
  151. package/dist/test/trace_journal_persistence.test.js +175 -0
  152. package/dist/test/trace_journal_persistence.test.js.map +1 -0
  153. package/dist/test/trace_persistence.test.d.ts +2 -0
  154. package/dist/test/trace_persistence.test.d.ts.map +1 -0
  155. package/dist/test/trace_persistence.test.js +216 -0
  156. package/dist/test/trace_persistence.test.js.map +1 -0
  157. package/dist/test/trip_protector.test.d.ts +2 -0
  158. package/dist/test/trip_protector.test.d.ts.map +1 -0
  159. package/dist/test/trip_protector.test.js +42 -0
  160. package/dist/test/trip_protector.test.js.map +1 -0
  161. package/examples/README.md +34 -0
  162. package/examples/cli-record-replay.mjs +74 -0
  163. package/examples/custom-channel.mjs +102 -0
  164. package/examples/js-pae-plugin.mjs +128 -0
  165. package/examples/mcp-adapter.mjs +102 -0
  166. package/package.json +60 -0
  167. package/src/core/orbitRuntimeHost.ts +853 -0
  168. package/src/index.ts +256 -0
@@ -0,0 +1,283 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ var __importDefault = (this && this.__importDefault) || function (mod) {
36
+ return (mod && mod.__esModule) ? mod : { "default": mod };
37
+ };
38
+ Object.defineProperty(exports, "__esModule", { value: true });
39
+ /**
40
+ * W30 — audit hash chain (anti-tamper audit trail) end to end.
41
+ *
42
+ * The chain turns the append-only audit file into a tamper-evident one: any
43
+ * edit to any entry breaks the chain AT that entry and everything after.
44
+ * Without a signing key the journal records no chain fields at all — the
45
+ * pre-W30 behaviour, byte for byte (backward-compat rule).
46
+ */
47
+ const node_test_1 = require("node:test");
48
+ const strict_1 = __importDefault(require("node:assert/strict"));
49
+ const node_fs_1 = require("node:fs");
50
+ const os = __importStar(require("node:os"));
51
+ const path = __importStar(require("node:path"));
52
+ const index_1 = require("../src/index");
53
+ const KEY = "test-audit-key-0001";
54
+ function entry(overrides = {}) {
55
+ return {
56
+ entryUid: "uid-1",
57
+ entryClass: "TEST",
58
+ occurredAt: 1,
59
+ traceMarkId: "t-1",
60
+ factPayload: { k: "v" },
61
+ ...overrides
62
+ };
63
+ }
64
+ /* ---------------------------------------------------------- pure functions */
65
+ (0, node_test_1.test)("audit chain: a well-formed chain verifies as consistent and signed", () => {
66
+ const e1 = entry({ entryUid: "a", occurredAt: 1 });
67
+ const e2 = entry({ entryUid: "b", occurredAt: 2, factPayload: { n: 2 } });
68
+ const a1 = (0, index_1.chainFieldsOf)(KEY, (0, index_1.firstChainHash)(KEY), e1);
69
+ e1.prevHash = a1.prevHash;
70
+ e1.chainHash = a1.chainHash;
71
+ const a2 = (0, index_1.chainFieldsOf)(KEY, e1.chainHash, e2);
72
+ e2.prevHash = a2.prevHash;
73
+ e2.chainHash = a2.chainHash;
74
+ const report = (0, index_1.verifyAuditChain)([e1, e2], KEY);
75
+ strict_1.default.equal(report.consistent, true);
76
+ strict_1.default.equal(report.signed, true);
77
+ strict_1.default.equal(report.total, 2);
78
+ strict_1.default.notEqual(e1.chainHash, e2.chainHash);
79
+ strict_1.default.equal(e2.prevHash, e1.chainHash, "the chain links consecutively");
80
+ });
81
+ (0, node_test_1.test)("audit chain: tampering with entry content is located at that index", () => {
82
+ const e1 = entry({ entryUid: "a" });
83
+ const e2 = entry({ entryUid: "b" });
84
+ const e3 = entry({ entryUid: "c" });
85
+ let prev = (0, index_1.firstChainHash)(KEY);
86
+ for (const e of [e1, e2, e3]) {
87
+ const f = (0, index_1.chainFieldsOf)(KEY, prev, e);
88
+ e.prevHash = f.prevHash;
89
+ e.chainHash = f.chainHash;
90
+ prev = f.chainHash;
91
+ }
92
+ // Tamper with the middle entry's payload.
93
+ e2.factPayload = { k: "EVIL" };
94
+ const report = (0, index_1.verifyAuditChain)([e1, e2, e3], KEY);
95
+ strict_1.default.equal(report.consistent, false);
96
+ strict_1.default.equal(report.brokenAt, 1, "the tampered entry itself is the break point");
97
+ strict_1.default.match(report.brokenReason ?? "", /chainHash/);
98
+ });
99
+ (0, node_test_1.test)("audit chain: deleting an interior entry breaks the link after it", () => {
100
+ const e1 = entry({ entryUid: "a" });
101
+ const e2 = entry({ entryUid: "b" });
102
+ const e3 = entry({ entryUid: "c" });
103
+ let prev = (0, index_1.firstChainHash)(KEY);
104
+ for (const e of [e1, e2, e3]) {
105
+ const f = (0, index_1.chainFieldsOf)(KEY, prev, e);
106
+ e.prevHash = f.prevHash;
107
+ e.chainHash = f.chainHash;
108
+ prev = f.chainHash;
109
+ }
110
+ const report = (0, index_1.verifyAuditChain)([e1, e3], KEY);
111
+ strict_1.default.equal(report.consistent, false);
112
+ strict_1.default.equal(report.brokenAt, 1, "the survivor's prevHash no longer matches e1's chainHash");
113
+ });
114
+ (0, node_test_1.test)("audit chain: wrong key fails verification (the signature half)", () => {
115
+ const e = entry({ entryUid: "a" });
116
+ const f = (0, index_1.chainFieldsOf)(KEY, (0, index_1.firstChainHash)(KEY), e);
117
+ e.prevHash = f.prevHash;
118
+ e.chainHash = f.chainHash;
119
+ const report = (0, index_1.verifyAuditChain)([e], "wrong-key");
120
+ strict_1.default.equal(report.consistent, false);
121
+ strict_1.default.match(report.brokenReason ?? "", /prevHash/);
122
+ });
123
+ (0, node_test_1.test)("audit chain: unsigned journals are vacuously consistent, not signed", () => {
124
+ strict_1.default.equal((0, index_1.verifyAuditChain)([], KEY).signed, false);
125
+ const bare = entry();
126
+ strict_1.default.equal((0, index_1.verifyAuditChain)([bare], KEY).signed, false);
127
+ strict_1.default.equal((0, index_1.verifyAuditChain)([bare], KEY).consistent, true);
128
+ });
129
+ (0, node_test_1.test)("audit chain: a mixed chain (some entries unsigned) is a fault", () => {
130
+ const e1 = entry({ entryUid: "a" });
131
+ const e2 = entry({ entryUid: "b" }); // no chain fields
132
+ const f = (0, index_1.chainFieldsOf)(KEY, (0, index_1.firstChainHash)(KEY), e1);
133
+ e1.prevHash = f.prevHash;
134
+ e1.chainHash = f.chainHash;
135
+ const report = (0, index_1.verifyAuditChain)([e1, e2], KEY);
136
+ strict_1.default.equal(report.consistent, false);
137
+ strict_1.default.equal(report.brokenAt, 1);
138
+ strict_1.default.match(report.brokenReason ?? "", /unsigned/);
139
+ });
140
+ (0, node_test_1.test)("audit chain: hash is deterministic and chain-order dependent", () => {
141
+ const e = entry();
142
+ const f1 = (0, index_1.chainFieldsOf)(KEY, (0, index_1.firstChainHash)(KEY), e);
143
+ const f2 = (0, index_1.chainFieldsOf)(KEY, (0, index_1.firstChainHash)(KEY), e);
144
+ strict_1.default.equal(f1.chainHash, f2.chainHash, "same key + entry + predecessor -> same hash");
145
+ const f3 = (0, index_1.chainFieldsOf)(KEY, "other-prev", e);
146
+ strict_1.default.notEqual(f1.chainHash, f3.chainHash, "a different predecessor changes the hash");
147
+ strict_1.default.equal((0, index_1.chainTailOf)([]), null);
148
+ strict_1.default.equal((0, index_1.chainTailOf)([{ ...e, chainHash: "tail" }]), "tail");
149
+ });
150
+ /* -------------------------------------------------------------- journal level */
151
+ (0, node_test_1.test)("audit chain: a keyed journal chains every append and rebuilds the tail on restore", () => {
152
+ const j = new index_1.TraceJournal(KEY);
153
+ const a = j.append({ entryClass: "A", traceMarkId: "t", factPayload: {} });
154
+ const b = j.append({ entryClass: "B", traceMarkId: "t", factPayload: {} });
155
+ strict_1.default.ok(a.chainHash && a.prevHash);
156
+ strict_1.default.equal(b.prevHash, a.chainHash, "second entry links from the first");
157
+ strict_1.default.equal((0, index_1.verifyAuditChain)(j.snapshot(), KEY).consistent, true);
158
+ // Restore (as recovery does) and append: the chain continues, not restarts.
159
+ const j2 = new index_1.TraceJournal(KEY);
160
+ j2.restoreSnapshot(j.snapshot());
161
+ const c = j2.append({ entryClass: "C", traceMarkId: "t", factPayload: {} });
162
+ strict_1.default.equal(c.prevHash, b.chainHash, "post-restore append links from the restored tail");
163
+ strict_1.default.equal((0, index_1.verifyAuditChain)(j2.snapshot(), KEY).consistent, true);
164
+ });
165
+ (0, node_test_1.test)("audit chain: an unsigned journal records no chain fields (pre-W30 byte-for-byte)", () => {
166
+ const j = new index_1.TraceJournal();
167
+ const e = j.append({ entryClass: "A", traceMarkId: "t", factPayload: {} });
168
+ strict_1.default.ok(!("chainHash" in e) && !("prevHash" in e));
169
+ });
170
+ /* ------------------------------------------------------------------ host level */
171
+ (0, node_test_1.test)("audit chain: a keyed host appends chained audit entries and verifies clean", async () => {
172
+ const host = new index_1.OrbitRuntimeHost({ auditSigningKey: KEY });
173
+ await host.bootHost();
174
+ // Host normal paths append audit entries through the journal; drive a few
175
+ // directly to exercise the same append -> chain pipeline the host uses.
176
+ host.traceJournal.append({ entryClass: "AUDIT", traceMarkId: "t-audit", factPayload: { action: "a" } });
177
+ host.traceJournal.append({ entryClass: "AUDIT", traceMarkId: "t-audit", factPayload: { action: "b" } });
178
+ const report = host.verifyAuditChain();
179
+ strict_1.default.equal(report.consistent, true);
180
+ strict_1.default.equal(report.signed, true);
181
+ strict_1.default.ok(report.total >= 2);
182
+ await host.shutdownHost();
183
+ });
184
+ (0, node_test_1.test)("audit chain: host without a key verifies as unsigned", async () => {
185
+ const host = new index_1.OrbitRuntimeHost();
186
+ await host.bootHost();
187
+ const report = host.verifyAuditChain();
188
+ strict_1.default.equal(report.consistent, true);
189
+ strict_1.default.equal(report.signed, false);
190
+ await host.shutdownHost();
191
+ });
192
+ (0, node_test_1.test)("audit chain: injecting a tampered entry is detected by host verification", async () => {
193
+ const host = new index_1.OrbitRuntimeHost({ auditSigningKey: KEY });
194
+ await host.bootHost();
195
+ host.registerPlugin({
196
+ id: "audit.tamper",
197
+ displayName: "Audit",
198
+ edition: "1.0.0",
199
+ requireHostMinEdition: "1.0.0",
200
+ allowCapabilities: ["channel:read"]
201
+ });
202
+ host.traceJournal.append({ entryClass: "AUDIT", traceMarkId: "t-tamper", factPayload: { action: "original" } });
203
+ // Simulate a disk-level edit: restore a snapshot with a doctored entry.
204
+ const tampered = host.traceJournal.entries();
205
+ tampered[0].factPayload = { evil: true };
206
+ host.traceJournal.restoreSnapshot(tampered);
207
+ const report = host.verifyAuditChain();
208
+ strict_1.default.equal(report.consistent, false);
209
+ strict_1.default.equal(report.brokenAt, 0);
210
+ await host.shutdownHost();
211
+ });
212
+ (0, node_test_1.test)("audit chain: strict tier requires the signing key", () => {
213
+ strict_1.default.throws(() => new index_1.OrbitRuntimeHost({
214
+ governanceProfile: "strict",
215
+ traceJournalPath: "./dist-test-audit-strict.wal"
216
+ }), /requires auditSigningKey/);
217
+ });
218
+ (0, node_test_1.test)("audit chain: strict tier refuses to boot on a broken chain", async () => {
219
+ const root = await node_fs_1.promises.mkdtemp(path.join(os.tmpdir(), "orbit-audit-strict-"));
220
+ const tracePath = path.join(root, "trace.wal.jsonl");
221
+ // Run 1: write a signed, durable audit trail (at least one entry).
222
+ const good = new index_1.OrbitRuntimeHost({ auditSigningKey: KEY, traceJournalPath: tracePath });
223
+ await good.bootHost();
224
+ good.traceJournal.append({ entryClass: "AUDIT", traceMarkId: "t-seed", factPayload: { action: "seed" } });
225
+ await good.shutdownHost();
226
+ // Tamper the WAL directly (the threat model: an editor with file access).
227
+ const text = await node_fs_1.promises.readFile(tracePath, "utf8");
228
+ const lines = text.trim().split("\n");
229
+ strict_1.default.ok(lines.length >= 1);
230
+ const doctored = lines.map((line, i) => {
231
+ if (i === 0) {
232
+ const obj = JSON.parse(line);
233
+ obj.factPayload = { evil: true };
234
+ return JSON.stringify(obj);
235
+ }
236
+ return line;
237
+ });
238
+ await node_fs_1.promises.writeFile(tracePath, doctored.join("\n"), "utf8");
239
+ // Run 2: strict must refuse to boot on the broken chain.
240
+ await strict_1.default.rejects((async () => {
241
+ const bad = new index_1.OrbitRuntimeHost({
242
+ governanceProfile: "strict",
243
+ auditSigningKey: KEY,
244
+ traceJournalPath: tracePath
245
+ });
246
+ await bad.bootHost();
247
+ })(), /audit chain broken/);
248
+ await node_fs_1.promises.rm(root, { recursive: true, force: true });
249
+ });
250
+ (0, node_test_1.test)("audit chain: signed chain survives persistence + recovery + append (cross-process)", async () => {
251
+ const root = await node_fs_1.promises.mkdtemp(path.join(os.tmpdir(), "orbit-audit-persist-"));
252
+ const tracePath = path.join(root, "trace.wal.jsonl");
253
+ // "Process 1": signed durable audit trail, one entry, clean shutdown.
254
+ const p1 = new index_1.OrbitRuntimeHost({ auditSigningKey: KEY, traceJournalPath: tracePath });
255
+ await p1.bootHost();
256
+ p1.traceJournal.append({ entryClass: "AUDIT", traceMarkId: "t-p1", factPayload: { action: "seed" } });
257
+ await p1.shutdownHost();
258
+ // "Process 2": recover, append one more, verify the whole chain.
259
+ const p2 = new index_1.OrbitRuntimeHost({ auditSigningKey: KEY, traceJournalPath: tracePath });
260
+ await p2.bootHost();
261
+ p2.registerPlugin({
262
+ id: "audit.persist",
263
+ displayName: "Audit",
264
+ edition: "1.0.0",
265
+ requireHostMinEdition: "1.0.0",
266
+ allowCapabilities: ["channel:read"]
267
+ });
268
+ const ctx = { traceMarkId: "t-persist", maxWaitMs: 5000, pluginUnitId: "audit.persist" };
269
+ await p2.capabilityInvoke({
270
+ kind: index_1.ChannelKind.MEM_KV_STORE,
271
+ pluginId: "audit.persist",
272
+ funcName: "readEntry",
273
+ args: ["k"],
274
+ mode: "record",
275
+ ctx
276
+ });
277
+ const report = p2.verifyAuditChain();
278
+ strict_1.default.equal(report.consistent, true, "recovered + appended chain still verifies");
279
+ strict_1.default.equal(report.signed, true);
280
+ await p2.shutdownHost();
281
+ await node_fs_1.promises.rm(root, { recursive: true, force: true });
282
+ });
283
+ //# sourceMappingURL=audit_chain.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit_chain.test.js","sourceRoot":"","sources":["../../test/audit_chain.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,yCAAiC;AACjC,gEAAwC;AACxC,qCAAyC;AACzC,4CAA8B;AAC9B,gDAAkC;AAElC,wCAWsB;AAEtB,MAAM,GAAG,GAAG,qBAAqB,CAAC;AAElC,SAAS,KAAK,CAAC,YAA0D,EAAE;IACzE,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,MAAM;QAClB,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;QACvB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,IAAA,gBAAI,EAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC1B,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,EAAE,CAAC,SAAU,EAAE,EAAE,CAAC,CAAC;IACjD,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAC1B,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;IAE5B,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9B,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,gBAAM,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,IAAA,sBAAc,EAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC1B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC;IACrB,CAAC;IACD,0CAA0C;IAC1C,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,8CAA8C,CAAC,CAAC;IACjF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,IAAA,sBAAc,EAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC1B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,0DAA0D,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACxB,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAClD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAgB,EAAC,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC;IACrB,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAgB,EAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1D,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAgB,EAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,kBAAkB;IACvD,MAAM,CAAC,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzB,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAA,wBAAgB,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAClB,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,gBAAM,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,6CAA6C,CAAC,CAAC;IACxF,MAAM,EAAE,GAAG,IAAA,qBAAa,EAAC,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC/C,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,0CAA0C,CAAC,CAAC;IACxF,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpC,gBAAM,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAElF,IAAA,gBAAI,EAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,CAAC,GAAG,IAAI,oBAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,gBAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC3E,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAgB,EAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEnE,4EAA4E;IAC5E,MAAM,EAAE,GAAG,IAAI,oBAAY,CAAC,GAAG,CAAC,CAAC;IACjC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAC1F,gBAAM,CAAC,KAAK,CAAC,IAAA,wBAAgB,EAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,CAAC,GAAG,IAAI,oBAAY,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,gBAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,mFAAmF;AAEnF,IAAA,gBAAI,EAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,IAAI,GAAG,IAAI,wBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,gBAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,IAAI,GAAG,IAAI,wBAAgB,EAAE,CAAC;IACpC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,IAAI,GAAG,IAAI,wBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,IAAI,CAAC,cAAc,CAAC;QAClB,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,OAAO;QAChB,qBAAqB,EAAE,OAAO;QAC9B,iBAAiB,EAAE,CAAC,cAAc,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAChH,wEAAwE;IACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IAC7C,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,IAAI,wBAAgB,CAAC;QACnB,iBAAiB,EAAE,QAAQ;QAC3B,gBAAgB,EAAE,8BAA8B;KACjD,CAAC,EACJ,0BAA0B,CAC3B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAErD,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAI,wBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1G,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,gBAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACrC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,GAAG,CAAC,WAAW,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,kBAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAE3D,yDAAyD;IACzD,MAAM,gBAAM,CAAC,OAAO,CAClB,CAAC,KAAK,IAAI,EAAE;QACV,MAAM,GAAG,GAAG,IAAI,wBAAgB,CAAC;YAC/B,iBAAiB,EAAE,QAAQ;YAC3B,eAAe,EAAE,GAAG;YACpB,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC,CAAC,EAAE,EACJ,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAErD,sEAAsE;IACtE,MAAM,EAAE,GAAG,IAAI,wBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IACpB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtG,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;IAExB,iEAAiE;IACjE,MAAM,EAAE,GAAG,IAAI,wBAAgB,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IACpB,EAAE,CAAC,cAAc,CAAC;QAChB,EAAE,EAAE,eAAe;QACnB,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,OAAO;QAChB,qBAAqB,EAAE,OAAO;QAC9B,iBAAiB,EAAE,CAAC,cAAc,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACzF,MAAM,EAAE,CAAC,gBAAgB,CAAC;QACxB,IAAI,EAAE,mBAAW,CAAC,YAAY;QAC9B,QAAQ,EAAE,eAAe;QACzB,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,CAAC,GAAG,CAAC;QACX,IAAI,EAAE,QAAQ;QACd,GAAG;KACJ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACrC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,2CAA2C,CAAC,CAAC;IACnF,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;IACxB,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=channel_hub.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"channel_hub.test.d.ts","sourceRoot":"","sources":["../../test/channel_hub.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,66 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ const node_test_1 = require("node:test");
7
+ const strict_1 = __importDefault(require("node:assert/strict"));
8
+ const core_hub_1 = require("@orbit/core-hub");
9
+ const core_hub_2 = require("@orbit/core-hub");
10
+ const core_hub_3 = require("@orbit/core-hub");
11
+ const infra_common_1 = require("@orbit/infra-common");
12
+ function makeCtx(overrides = {}) {
13
+ return { traceMarkId: "t-1", maxWaitMs: 1000, ...overrides };
14
+ }
15
+ (0, node_test_1.test)("内置通道注册后读写正常", async () => {
16
+ const hub = new core_hub_1.ChannelHub();
17
+ hub.registerBuiltInChannel(infra_common_1.ChannelKind.MEM_KV_STORE, new core_hub_2.MemoryKvChannel());
18
+ await hub.setupAllBuiltInChannels(makeCtx());
19
+ await hub.fireChannelCall(infra_common_1.ChannelKind.MEM_KV_STORE, makeCtx(), "writeEntry", "k", "v", 0);
20
+ const val = await hub.fireChannelCall(infra_common_1.ChannelKind.MEM_KV_STORE, makeCtx(), "readEntry", "k");
21
+ strict_1.default.equal(val, "v");
22
+ await hub.teardown();
23
+ });
24
+ (0, node_test_1.test)("插件扩展通道优先于内置通道", async () => {
25
+ const hub = new core_hub_1.ChannelHub();
26
+ hub.registerBuiltInChannel(infra_common_1.ChannelKind.LLM_ACCESS, new core_hub_3.LlmMockChannel());
27
+ const fake = {
28
+ setup: async () => { },
29
+ teardown: async () => { },
30
+ chatRound: async () => "fake-llm",
31
+ determinismMeta: { determinism: infra_common_1.DeterminismLevel.DETERMINISTIC }
32
+ };
33
+ hub.registerPluginExtChannel(infra_common_1.ChannelKind.LLM_ACCESS, fake);
34
+ const out = await hub.fireChannelCall(infra_common_1.ChannelKind.LLM_ACCESS, makeCtx({ maxWaitMs: 5000 }), "chatRound", "hi");
35
+ strict_1.default.equal(out, "fake-llm");
36
+ await hub.teardown();
37
+ });
38
+ (0, node_test_1.test)("重复注册内置通道被拒绝", () => {
39
+ const hub = new core_hub_1.ChannelHub();
40
+ hub.registerBuiltInChannel(infra_common_1.ChannelKind.MEM_KV_STORE, new core_hub_2.MemoryKvChannel());
41
+ strict_1.default.throws(() => hub.registerBuiltInChannel(infra_common_1.ChannelKind.MEM_KV_STORE, new core_hub_2.MemoryKvChannel()));
42
+ });
43
+ (0, node_test_1.test)("超时截断保护生效", async () => {
44
+ const hub = new core_hub_1.ChannelHub();
45
+ const slow = {
46
+ setup: async () => { },
47
+ teardown: async () => { },
48
+ hang: () => new Promise(() => { }),
49
+ determinismMeta: { determinism: infra_common_1.DeterminismLevel.DETERMINISTIC }
50
+ };
51
+ hub.registerBuiltInChannel(infra_common_1.ChannelKind.MEM_KV_STORE, slow);
52
+ await strict_1.default.rejects(hub.fireChannelCall(infra_common_1.ChannelKind.MEM_KV_STORE, makeCtx({ maxWaitMs: 50 }), "hang"), /channel call exceeded/);
53
+ await hub.teardown();
54
+ });
55
+ (0, node_test_1.test)("插件能力裁决:未声明权限被拒绝,宿主调用不受限", async () => {
56
+ const hub = new core_hub_1.ChannelHub();
57
+ hub.registerBuiltInChannel(infra_common_1.ChannelKind.MEM_KV_STORE, new core_hub_2.MemoryKvChannel());
58
+ hub.attachCapabilityGate((pluginId, kind, funcName) => {
59
+ return !(kind === infra_common_1.ChannelKind.MEM_KV_STORE && funcName === "writeEntry");
60
+ });
61
+ await strict_1.default.rejects(hub.fireChannelCall(infra_common_1.ChannelKind.MEM_KV_STORE, makeCtx({ pluginUnitId: "p1" }), "writeEntry", "k", "v", 0), /lacks capability for channel/);
62
+ // 无 pluginUnitId 的宿主侧调用不受裁决限制
63
+ await hub.fireChannelCall(infra_common_1.ChannelKind.MEM_KV_STORE, makeCtx(), "writeEntry", "k", "v", 0);
64
+ await hub.teardown();
65
+ });
66
+ //# sourceMappingURL=channel_hub.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"channel_hub.test.js","sourceRoot":"","sources":["../../test/channel_hub.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAiC;AACjC,gEAAwC;AACxC,8CAA6C;AAC7C,8CAAkD;AAClD,8CAAiD;AACjD,sDAAoF;AAEpF,SAAS,OAAO,CAAC,YAAqC,EAAE;IACtD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;AAC/D,CAAC;AAED,IAAA,gBAAI,EAAC,aAAa,EAAE,KAAK,IAAI,EAAE;IAC7B,MAAM,GAAG,GAAG,IAAI,qBAAU,EAAE,CAAC;IAC7B,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,YAAY,EAAE,IAAI,0BAAe,EAAE,CAAC,CAAC;IAC5E,MAAM,GAAG,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,CAAC,eAAe,CAAO,0BAAW,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAS,0BAAW,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACrG,gBAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,eAAe,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,GAAG,GAAG,IAAI,qBAAU,EAAE,CAAC;IAC7B,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,UAAU,EAAE,IAAI,yBAAc,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACxB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU;QACjC,eAAe,EAAE,EAAE,WAAW,EAAE,+BAAgB,CAAC,aAAa,EAAE;KACjE,CAAC;IACF,GAAG,CAAC,wBAAwB,CAAC,0BAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CACnC,0BAAW,CAAC,UAAU,EACtB,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAC5B,WAAW,EACX,IAAI,CACL,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9B,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,EAAE;IACvB,MAAM,GAAG,GAAG,IAAI,qBAAU,EAAE,CAAC;IAC7B,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,YAAY,EAAE,IAAI,0BAAe,EAAE,CAAC,CAAC;IAC5E,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,YAAY,EAAE,IAAI,0BAAe,EAAE,CAAC,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,UAAU,EAAE,KAAK,IAAI,EAAE;IAC1B,MAAM,GAAG,GAAG,IAAI,qBAAU,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACrB,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACxB,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QACvC,eAAe,EAAE,EAAE,WAAW,EAAE,+BAAgB,CAAC,aAAa,EAAE;KACjE,CAAC;IACF,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,gBAAM,CAAC,OAAO,CAClB,GAAG,CAAC,eAAe,CAAO,0BAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,EACvF,uBAAuB,CACxB,CAAC;IACF,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;IACzC,MAAM,GAAG,GAAG,IAAI,qBAAU,EAAE,CAAC;IAC7B,GAAG,CAAC,sBAAsB,CAAC,0BAAW,CAAC,YAAY,EAAE,IAAI,0BAAe,EAAE,CAAC,CAAC;IAC5E,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACpD,OAAO,CAAC,CAAC,IAAI,KAAK,0BAAW,CAAC,YAAY,IAAI,QAAQ,KAAK,YAAY,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,MAAM,gBAAM,CAAC,OAAO,CAClB,GAAG,CAAC,eAAe,CAAO,0BAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAC/G,8BAA8B,CAC/B,CAAC;IACF,8BAA8B;IAC9B,MAAM,GAAG,CAAC,eAAe,CAAO,0BAAW,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=cordis_adapter.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cordis_adapter.test.d.ts","sourceRoot":"","sources":["../../test/cordis_adapter.test.ts"],"names":[],"mappings":""}