witnora 0.8.1 → 0.9.1

package/dist/vendor/onegent-runtime/browser-adapter-kit.d.ts

@@ -0,0 +1,107 @@
+import type { BrowserCredentialLeaseInput, BrowserTargetAuditSource, TargetAuditEvent } from "./browser-enforcement-runtime.js";
+import type { ControlledActionAdapter, IndependentOutcomeProbe, OutcomeObservation } from "./trust-types.js";
+import type { ActionExecutionContext, ActionExecutionSummary, ActionIntent, ActionType, LocalActionAdapterResult } from "./types.js";
+export declare const CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL: "agentcert.customer_browser_adapter.v0.1";
+export interface BrowserAdapterCredential {
+    reference: string;
+    secret: string;
+    expiresAt: string;
+}
+export interface CustomerOwnedBrowserAdapterConfig {
+    name: string;
+    targetSystem: string;
+    allowedOrigins: string[];
+    allowedActionTypes: ActionType[];
+    allowedOperation: string;
+    allowedResource: string;
+    sandbox: true;
+    resolveWriteCredential(): BrowserAdapterCredential | Promise<BrowserAdapterCredential>;
+    resolveReadCredential(): BrowserAdapterCredential | Promise<BrowserAdapterCredential>;
+    execute(input: {
+        action: ActionIntent;
+        context: ActionExecutionContext;
+        origin: string;
+        operation: string;
+        resource: string;
+        credential: string;
+    }): LocalActionAdapterResult | Promise<LocalActionAdapterResult>;
+    observe(input: {
+        action: ActionIntent;
+        execution: ActionExecutionSummary;
+        credential: string;
+    }): OutcomeObservation | Promise<OutcomeObservation>;
+    listAuditEvents(input: {
+        windowStart: string;
+        windowEnd: string;
+        credential: string;
+    }): TargetAuditEvent[] | Promise<TargetAuditEvent[]>;
+    revokeWriteCredential?(credential: BrowserAdapterCredential): void | Promise<void>;
+}
+export interface PreparedCustomerBrowserAdapter {
+    adapter: ControlledActionAdapter;
+    outcomeProbe: IndependentOutcomeProbe;
+    targetAuditSource: BrowserTargetAuditSource;
+    credentialLease: BrowserCredentialLeaseInput;
+    metadata: {
+        protocolVersion: typeof CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL;
+        sandbox: true;
+        adapterName: string;
+        targetSystem: string;
+        allowedOrigins: readonly string[];
+        allowedActionTypes: readonly ActionType[];
+        allowedOperation: string;
+        allowedResource: string;
+        writeCredentialReferenceSha256: string;
+        readCredentialReferenceSha256: string;
+    };
+}
+export interface CustomerOwnedBrowserAdapterKit {
+    readonly protocolVersion: typeof CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL;
+    readonly name: string;
+    readonly targetSystem: string;
+    prepareExecution(): Promise<PreparedCustomerBrowserAdapter>;
+}
+export interface BrowserAdapterConformanceFixture {
+    action: ActionIntent;
+    expectedObservedState: Record<string, unknown>;
+    expectedAudit: {
+        operation: string;
+        resource: string;
+        parametersDigest: string;
+    };
+    forbiddenSecrets?: string[];
+}
+export interface BrowserAdapterConformanceReport {
+    schemaVersion: "agentcert.customer_browser_adapter_conformance.v0.1";
+    kind: "agentcert.customer_browser_adapter_conformance";
+    implementation: string;
+    generatedAt: string;
+    verdict: {
+        passed: boolean;
+        score: number;
+    };
+    summary: {
+        passed: number;
+        failed: number;
+        total: number;
+    };
+    checks: Array<{
+        id: string;
+        status: "passed" | "failed";
+        message: string;
+    }>;
+    boundary: PreparedCustomerBrowserAdapter["metadata"];
+    evidence: {
+        observedStateSha256?: string;
+        auditEventSha256?: string;
+        credentialsRevoked: boolean;
+    };
+    limitations: string[];
+}
+export declare function createCustomerOwnedBrowserAdapterKit(config: CustomerOwnedBrowserAdapterConfig): CustomerOwnedBrowserAdapterKit;
+export declare function runCustomerOwnedBrowserAdapterConformance(input: {
+    kit: CustomerOwnedBrowserAdapterKit;
+    fixture: BrowserAdapterConformanceFixture;
+    now?: () => Date;
+}): Promise<BrowserAdapterConformanceReport>;
+//# sourceMappingURL=browser-adapter-kit.d.ts.map

package/dist/vendor/onegent-runtime/browser-adapter-kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-adapter-kit.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/browser-adapter-kit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEhI,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC7G,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,YAAY,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAErI,eAAO,MAAM,uCAAuC,EAAG,yCAAkD,CAAC;AAE1G,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,IAAI,CAAC;IACd,sBAAsB,IAAI,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACvF,qBAAqB,IAAI,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,EAAE;QACb,MAAM,EAAE,YAAY,CAAC;QACrB,OAAO,EAAE,sBAAsB,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,EAAE;QACb,MAAM,EAAE,YAAY,CAAC;QACrB,SAAS,EAAE,sBAAsB,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrD,eAAe,CAAC,KAAK,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,gBAAgB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrD,qBAAqB,CAAC,CAAC,UAAU,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,uBAAuB,CAAC;IACjC,YAAY,EAAE,uBAAuB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,eAAe,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,EAAE;QACR,eAAe,EAAE,OAAO,uCAAuC,CAAC;QAChE,OAAO,EAAE,IAAI,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,kBAAkB,EAAE,SAAS,UAAU,EAAE,CAAC;QAC1C,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;QACxB,8BAA8B,EAAE,MAAM,CAAC;QACvC,6BAA6B,EAAE,MAAM,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,eAAe,EAAE,OAAO,uCAAuC,CAAC;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gBAAgB,IAAI,OAAO,CAAC,8BAA8B,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,YAAY,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,aAAa,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,qDAAqD,CAAC;IACrE,IAAI,EAAE,gDAAgD,CAAC;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,QAAQ,EAAE,8BAA8B,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAA;KAAE,CAAC;IACnG,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,oCAAoC,CAAC,MAAM,EAAE,iCAAiC,GAAG,8BAA8B,CAyF9H;AAED,wBAAsB,yCAAyC,CAAC,KAAK,EAAE;IACrE,GAAG,EAAE,8BAA8B,CAAC;IACpC,OAAO,EAAE,gCAAgC,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAuD3C"}

package/dist/vendor/onegent-runtime/browser-adapter-kit.js

@@ -0,0 +1,187 @@
+import { randomUUID } from "node:crypto";
+import { createControlledActionAdapter, createIndependentOutcomeProbe } from "./controlled-adapter.js";
+import { canonicalJson, sha256 } from "./trust-crypto.js";
+export const CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL = "agentcert.customer_browser_adapter.v0.1";
+export function createCustomerOwnedBrowserAdapterKit(config) {
+    config = {
+        ...config,
+        allowedOrigins: config.allowedOrigins.map(normalizeOrigin),
+        allowedActionTypes: [...config.allowedActionTypes],
+    };
+    validateConfig(config);
+    return Object.freeze({
+        protocolVersion: CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL,
+        name: config.name,
+        targetSystem: config.targetSystem,
+        async prepareExecution() {
+            const [writeCredential, readCredential] = await Promise.all([
+                config.resolveWriteCredential(),
+                config.resolveReadCredential(),
+            ]);
+            validateCredential(writeCredential, "write");
+            validateCredential(readCredential, "read");
+            if (writeCredential.reference === readCredential.reference || writeCredential.secret === readCredential.secret) {
+                throw new Error("Browser adapter read and write credentials must be independent.");
+            }
+            let revoked = false;
+            const adapter = createControlledActionAdapter({
+                name: config.name,
+                control: {
+                    mode: "agentcert_gateway",
+                    credentials: "gateway_managed",
+                    bypassPrevention: "credentials_unavailable_to_agent",
+                    allowedActionTypes: [...config.allowedActionTypes],
+                    allowedTargetSystems: [config.targetSystem],
+                },
+                async execute(action, context) {
+                    assertBoundAction(config, action);
+                    if (!context?.idempotencyKey)
+                        throw new Error("Browser adapter execution requires an idempotency key.");
+                    return config.execute({
+                        action,
+                        context,
+                        origin: config.allowedOrigins[0],
+                        operation: config.allowedOperation,
+                        resource: config.allowedResource,
+                        credential: writeCredential.secret,
+                    });
+                },
+            });
+            const outcomeProbe = createIndependentOutcomeProbe({
+                name: `${config.name}:independent-outcome`,
+                independent: true,
+                async observe(action, execution) {
+                    assertBoundAction(config, action);
+                    return await config.observe({ action, execution, credential: readCredential.secret });
+                },
+            });
+            const targetAuditSource = Object.freeze({
+                name: `${config.name}:target-audit`,
+                exclusiveCredential: true,
+                async listEvents(windowStart, windowEnd) {
+                    return await config.listAuditEvents({ windowStart, windowEnd, credential: readCredential.secret });
+                },
+            });
+            return {
+                adapter,
+                outcomeProbe,
+                targetAuditSource,
+                credentialLease: {
+                    providerType: "CUSTOMER_SECRET_PROVIDER",
+                    providerReference: writeCredential.reference,
+                    isolationMode: "RUNTIME_INJECTED_CREDENTIAL",
+                    expiresAt: writeCredential.expiresAt,
+                    async revoke() {
+                        if (revoked)
+                            return;
+                        revoked = true;
+                        await config.revokeWriteCredential?.(writeCredential);
+                    },
+                },
+                metadata: Object.freeze({
+                    protocolVersion: CUSTOMER_OWNED_BROWSER_ADAPTER_PROTOCOL,
+                    sandbox: true,
+                    adapterName: config.name,
+                    targetSystem: config.targetSystem,
+                    allowedOrigins: Object.freeze([...config.allowedOrigins]),
+                    allowedActionTypes: Object.freeze([...config.allowedActionTypes]),
+                    allowedOperation: config.allowedOperation,
+                    allowedResource: config.allowedResource,
+                    writeCredentialReferenceSha256: sha256(writeCredential.reference),
+                    readCredentialReferenceSha256: sha256(readCredential.reference),
+                }),
+            };
+        },
+    });
+}
+export async function runCustomerOwnedBrowserAdapterConformance(input) {
+    const checks = [];
+    const check = (id, passed, message) => checks.push({ id, status: passed ? "passed" : "failed", message });
+    const prepared = await input.kit.prepareExecution();
+    const now = input.now ?? (() => new Date());
+    const executionResult = await prepared.adapter.execute(input.fixture.action, { idempotencyKey: `conformance:${randomUUID()}`, attempt: 1 });
+    const execution = {
+        method: executionResult.method ?? "LOCAL_ADAPTER",
+        status: "COMPLETED",
+        targetSystem: executionResult.targetSystem ?? input.fixture.action.targetSystem,
+        previousState: executionResult.previousState,
+        observedState: executionResult.observedState,
+        rollbackToken: executionResult.rollbackToken,
+    };
+    const observation = await prepared.outcomeProbe.observe(input.fixture.action, execution);
+    const auditEvents = await prepared.targetAuditSource.listEvents(new Date(now().getTime() - 60_000).toISOString(), new Date(now().getTime() + 60_000).toISOString());
+    await prepared.credentialLease.revoke?.();
+    await prepared.credentialLease.revoke?.();
+    const matchingAudit = auditEvents.filter((event) => event.actionId === input.fixture.action.id
+        && event.operation === input.fixture.expectedAudit.operation
+        && event.resource === input.fixture.expectedAudit.resource
+        && event.parametersDigest === input.fixture.expectedAudit.parametersDigest);
+    check("gateway-boundary", prepared.adapter.control.mode === "agentcert_gateway" && prepared.adapter.control.credentials === "gateway_managed", "Adapter is registered behind the Witnora credential-isolated gateway boundary.");
+    check("sandbox-target", input.fixture.action.environment !== "production" && prepared.metadata.sandbox === true, "Conformance execution is restricted to a declared sandbox target.");
+    check("bounded-action", prepared.adapter.control.allowedActionTypes.includes(input.fixture.action.actionType) && prepared.adapter.control.allowedTargetSystems.includes(input.fixture.action.targetSystem), "Action type and target system match the immutable allowlist.");
+    check("credential-separation", prepared.metadata.writeCredentialReferenceSha256 !== prepared.metadata.readCredentialReferenceSha256, "Write execution and read-only verification use separate credential references.");
+    check("outcome-verified", canonicalJson(observation.observedState) === canonicalJson(input.fixture.expectedObservedState), "Independent outcome observation matches the expected sandbox state.");
+    check("target-audit", matchingAudit.length === 1 && auditEvents.length === 1, "Exactly one matching target audit event was observed.");
+    check("credential-revocation", true, "Credential lease revocation is idempotent and completed without exposing credential bytes.");
+    const reportCore = {
+        schemaVersion: "agentcert.customer_browser_adapter_conformance.v0.1",
+        kind: "agentcert.customer_browser_adapter_conformance",
+        implementation: input.kit.name,
+        generatedAt: now().toISOString(),
+        boundary: prepared.metadata,
+        evidence: {
+            observedStateSha256: sha256(canonicalJson(observation.observedState)),
+            auditEventSha256: matchingAudit[0] ? sha256(canonicalJson(matchingAudit[0])) : undefined,
+            credentialsRevoked: true,
+        },
+        limitations: [
+            "Conformance proves the declared sandbox adapter boundary, not the security of the vendor production system.",
+            "Customer secret-provider controls remain the customer's responsibility.",
+        ],
+    };
+    const serialized = canonicalJson(reportCore);
+    const leaked = (input.fixture.forbiddenSecrets ?? []).filter((secret) => secret.length >= 4 && serialized.includes(secret));
+    check("secret-redaction", leaked.length === 0 && !/(?:Bearer\s+|(?:sk|rk)_(?:test|live)_)/i.test(serialized), "Conformance report contains digests only and no recognized credential material.");
+    const passed = checks.filter((entry) => entry.status === "passed").length;
+    return {
+        ...reportCore,
+        verdict: { passed: passed === checks.length, score: Math.round((passed / checks.length) * 100) },
+        summary: { passed, failed: checks.length - passed, total: checks.length },
+        checks,
+    };
+}
+function validateConfig(config) {
+    if (!config.name?.trim() || !config.targetSystem?.trim())
+        throw new Error("Browser adapter name and target system are required.");
+    if (config.sandbox !== true)
+        throw new Error("Customer-owned browser adapter v0.1 supports sandbox systems only.");
+    if (!config.allowedActionTypes.length || !config.allowedOrigins.length)
+        throw new Error("Browser adapter action and origin allowlists cannot be empty.");
+    if (!config.allowedOperation?.trim() || !config.allowedResource?.trim())
+        throw new Error("Browser adapter operation and resource bounds are required.");
+    if (new Set(config.allowedOrigins).size !== config.allowedOrigins.length)
+        throw new Error("Browser adapter origins must be unique.");
+}
+function normalizeOrigin(value) {
+    const parsed = new URL(value);
+    if (parsed.protocol !== "https:" || parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
+        throw new Error(`Browser adapter origin must be an exact HTTPS origin: ${value}`);
+    }
+    return parsed.origin;
+}
+function validateCredential(credential, kind) {
+    if (!credential?.reference?.trim() || !credential.secret || credential.secret.length < 8)
+        throw new Error(`Browser adapter ${kind} credential is invalid.`);
+    if (!Number.isFinite(Date.parse(credential.expiresAt)) || Date.parse(credential.expiresAt) <= Date.now())
+        throw new Error(`Browser adapter ${kind} credential must have a future expiry.`);
+}
+function assertBoundAction(config, action) {
+    if (action.environment === "production")
+        throw new Error("Customer-owned browser adapter v0.1 refuses production actions.");
+    if (!config.allowedActionTypes.includes(action.actionType))
+        throw new Error(`Action type ${action.actionType} is not allowed by this browser adapter.`);
+    if (action.targetSystem !== config.targetSystem)
+        throw new Error(`Target system ${action.targetSystem} is not allowed by this browser adapter.`);
+    if (action.targetUrl && !config.allowedOrigins.includes(new URL(action.targetUrl).origin))
+        throw new Error(`Target origin ${new URL(action.targetUrl).origin} is not allowed by this browser adapter.`);
+}

package/dist/vendor/onegent-runtime/browser-enforcement-runtime.d.ts

@@ -0,0 +1,183 @@
+import type { ActionIntent, ActionExecutionSummary } from "./types.js";
+import type { ControlledActionAdapter, IndependentOutcomeProbe, SourceSigner } from "./trust-types.js";
+import type { TrustedActionRecorder } from "./trusted-recorder.js";
+export declare const BROWSER_ENFORCEMENT_PROTOCOL: "agentcert.browser_enforcement.v0.2";
+export declare const EXECUTION_GRANT_CONTEXT: "agentcert.execution-grant.v0.2";
+export declare const RUNTIME_CLAIM_CONTEXT: "onegent.runtime-claim.v0.2";
+export declare const EXECUTION_SESSION_CONTEXT: "onegent.execution-session.v0.2";
+export declare const EVENT_CONTEXT: "onegent.execution-event.v0.2";
+export declare const EVENT_CHECKPOINT_CONTEXT: "onegent.event-checkpoint.v0.2";
+export declare const OUTCOME_CONTEXT: "onegent.outcome-attestation.v0.2";
+export declare const RECONCILIATION_CONTEXT: "onegent.reconciliation-report.v0.2";
+type CredentialIsolationMode = "PREAUTHENTICATED_BROWSER_CONTEXT" | "RUNTIME_INJECTED_CREDENTIAL" | "TARGET_EPHEMERAL_TOKEN" | "RUNTIME_MANAGED_SESSION";
+export interface HostedAttestation {
+    schemaVersion: "agentcert.server_attestation.v0.1";
+    algorithm: "Ed25519";
+    keyId: string;
+    signedAt: string;
+    payloadSha256: string;
+    signature: string;
+}
+export interface ExecutionGrantWirePayload {
+    protocolVersion: typeof BROWSER_ENFORCEMENT_PROTOCOL;
+    objectType: "ExecutionGrant";
+    signatureContext: typeof EXECUTION_GRANT_CONTEXT;
+    executionGrantId: string;
+    tenantId: string;
+    actionId: string;
+    actionIntentDigest: string;
+    principalIdentityId: string;
+    principalIdentityAssertionId?: string;
+    principalIdentityDigest?: string;
+    principalIdentityProvider?: string;
+    agentIdentityId: string;
+    agentBuildId: string;
+    agentBuildDigest: string;
+    mandateId: string;
+    mandateChainDigest: string;
+    policyDecisionId: string;
+    policyDecisionDigest: string;
+    approvalSetDigest: string;
+    adapterId: string;
+    adapterVersionConstraint: string;
+    expectedRuntimeIdentityId: string;
+    targetAudience: string;
+    allowedOrigins: string[];
+    allowedOperation: string;
+    allowedResource: string;
+    parametersDigest: string;
+    outcomePredicateDigest: string;
+    credentialIsolationRequirement: "REQUIRED";
+    reconciliationRequirement: "REQUIRED";
+    issuedAt: string;
+    notBefore: string;
+    expiresAt: string;
+    maxUses: 1;
+    nonce: string;
+    jti: string;
+    issuerKeyId: string;
+}
+export interface SignedExecutionGrantWire {
+    payload: ExecutionGrantWirePayload;
+    payloadSha256: string;
+    attestation: HostedAttestation;
+}
+export interface RuntimeSignedObject<T> {
+    payload: T;
+    payloadSha256: string;
+    signature: {
+        algorithm: "Ed25519";
+        keyId: string;
+        signature: string;
+    };
+}
+export interface RuntimeClaimWirePayload {
+    protocolVersion: typeof BROWSER_ENFORCEMENT_PROTOCOL;
+    objectType: "RuntimeClaim";
+    signatureContext: typeof RUNTIME_CLAIM_CONTEXT;
+    runtimeIdentityId: string;
+    executionGrantId: string;
+    executionGrantDigest: string;
+    actionId: string;
+    principalIdentityAssertionId?: string;
+    principalIdentityDigest?: string;
+    principalIdentityProvider?: string;
+    executionSessionId: string;
+    claimNonce: string;
+    claimedAt: string;
+    runtimeKeyId: string;
+    idempotencyKey: string;
+}
+export interface ExecutionSessionWirePayload {
+    protocolVersion: typeof BROWSER_ENFORCEMENT_PROTOCOL;
+    objectType: "ExecutionSessionAttestation";
+    signatureContext: typeof EXECUTION_SESSION_CONTEXT;
+    executionSessionId: string;
+    executionGrantId: string;
+    executionGrantDigest: string;
+    actionId: string;
+    actionIntentDigest: string;
+    runtimeIdentityId: string;
+    runtimeKeyId: string;
+    adapterId: string;
+    adapterVersion: string;
+    browserContextIdDigest: string;
+    credentialLeaseId: string;
+    credentialIsolationMode: CredentialIsolationMode;
+    targetAudience: string;
+    allowedOrigins: string[];
+    startedAt: string;
+    sessionExpiresAt: string;
+    eventChainGenesisHash: string;
+}
+export interface RuntimeIdentityConfig {
+    runtimeIdentityId: string;
+    runtimeKeyId: string;
+    signer: SourceSigner;
+}
+export interface BrowserCredentialLeaseInput {
+    credentialLeaseId?: string;
+    providerType: "DEVELOPMENT_SECRET_PROVIDER" | "CUSTOMER_SECRET_PROVIDER";
+    providerReference: string;
+    isolationMode: CredentialIsolationMode;
+    expiresAt: string;
+    revoke?: () => void | Promise<void>;
+}
+export interface TargetAuditEvent {
+    targetEventId: string;
+    actionId?: string;
+    executionSessionId?: string;
+    occurredAt: string;
+    operation: string;
+    resource: string;
+    parametersDigest: string;
+    credentialReferenceDigest: string;
+}
+export interface BrowserTargetAuditSource {
+    name: string;
+    exclusiveCredential: true;
+    listEvents(windowStart: string, windowEnd: string): Promise<TargetAuditEvent[]>;
+}
+export interface BrowserEnforcementExecutionOptions {
+    grant: SignedExecutionGrantWire;
+    hostedIssuerKeys: Record<string, string>;
+    runtime: RuntimeIdentityConfig;
+    action: ActionIntent;
+    actionIntentDigest: string;
+    agentBuildDigest: string;
+    approvedParameters: Record<string, unknown>;
+    outcomePredicate: Record<string, unknown>;
+    adapter: ControlledActionAdapter;
+    adapterVersion: string;
+    outcomeProbe: IndependentOutcomeProbe;
+    targetAuditSource: BrowserTargetAuditSource;
+    recorder: TrustedActionRecorder;
+    credentialLease: BrowserCredentialLeaseInput;
+    claimGrant(claim: RuntimeSignedObject<RuntimeClaimWirePayload>): Promise<{
+        status: "CLAIMED";
+        claimedAt: string;
+    }>;
+    markConsumed(executionGrantId: string, executionSessionId: string): Promise<void>;
+    now?: () => Date;
+    clockSkewMs?: number;
+}
+export interface BrowserEnforcementRuntimeBundle {
+    protocolVersion: typeof BROWSER_ENFORCEMENT_PROTOCOL;
+    executionGrant: SignedExecutionGrantWire;
+    grantStatus: "CONSUMED";
+    runtimeClaim: RuntimeSignedObject<RuntimeClaimWirePayload>;
+    executionSession: RuntimeSignedObject<ExecutionSessionWirePayload>;
+    credentialLease: Record<string, unknown>;
+    events: Array<RuntimeSignedObject<Record<string, unknown>>>;
+    eventCheckpoint: RuntimeSignedObject<Record<string, unknown>>;
+    outcomeAttestation: RuntimeSignedObject<Record<string, unknown>>;
+    reconciliationReport: RuntimeSignedObject<Record<string, unknown>>;
+    finalParametersDigest: string;
+    detectedBypass: boolean;
+    execution: ActionExecutionSummary;
+}
+export declare function executeBrowserEnforcement(options: BrowserEnforcementExecutionOptions): Promise<BrowserEnforcementRuntimeBundle>;
+export declare function verifyHostedExecutionGrant(grant: SignedExecutionGrantWire, issuerKeys: Record<string, string>, at?: Date, clockSkewMs?: number): void;
+export declare function signRuntimeObject<T>(payload: T, signer: SourceSigner): RuntimeSignedObject<T>;
+export {};
+//# sourceMappingURL=browser-enforcement-runtime.d.ts.map

package/dist/vendor/onegent-runtime/browser-enforcement-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-enforcement-runtime.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/browser-enforcement-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AAC1H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAInE,eAAO,MAAM,4BAA4B,EAAG,oCAA6C,CAAC;AAC1F,eAAO,MAAM,uBAAuB,EAAG,gCAAyC,CAAC;AACjF,eAAO,MAAM,qBAAqB,EAAG,4BAAqC,CAAC;AAC3E,eAAO,MAAM,yBAAyB,EAAG,gCAAyC,CAAC;AACnF,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,wBAAwB,EAAG,+BAAwC,CAAC;AACjF,eAAO,MAAM,eAAe,EAAG,kCAA2C,CAAC;AAC3E,eAAO,MAAM,sBAAsB,EAAG,oCAA6C,CAAC;AAEpF,KAAK,uBAAuB,GAAG,kCAAkC,GAAG,6BAA6B,GAAG,wBAAwB,GAAG,yBAAyB,CAAC;AAEzJ,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,mCAAmC,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB,EAAE,OAAO,uBAAuB,CAAC;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,UAAU,CAAC;IAC3C,yBAAyB,EAAE,UAAU,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,yBAAyB,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,OAAO,qBAAqB,CAAC;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,6BAA6B,CAAC;IAC1C,gBAAgB,EAAE,OAAO,yBAAyB,CAAC;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,6BAA6B,GAAG,0BAA0B,CAAC;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,uBAAuB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,IAAI,CAAC;IAC1B,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,wBAAwB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,EAAE,uBAAuB,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,uBAAuB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,cAAc,EAAE,wBAAwB,CAAC;IACzC,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,gBAAgB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IACnE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,kBAAkB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,oBAAoB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,sBAAsB,CAAC;CACnC;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA4OrI;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,OAAa,EAAE,WAAW,SAAS,GAAG,IAAI,CAa3J;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAG7F"}