witnora 0.9.2 → 0.9.3

package/README.md

@@ -52,6 +52,21 @@ runner:
 npx witnora@latest setup apply --plan witnora-setup-plan.json --repo .
 ```
 
+Customer-owned deployment boundaries can import the bounded credential broker
+and admission adapters from the canonical package:
+
+```ts
+import {
+  exchangeGitHubOidcPromotionGrant,
+  deployWithPromotionEnforcement,
+  createKubernetesAdmissionHandler,
+} from "witnora/deployment-enforcement";
+```
+
+The SDK rejects deployment before customer code runs unless the exact artifact,
+target, and adapter match a valid single-use credential. It does not retain raw
+OIDC or deployment bearer tokens.
+
 Add `--github-pr` only after reviewing the generated files. The runner accepts
 only the five Witnora templates and ignores commands embedded in a plan.
 Coding, workflow, and data integrations begin at observed-event strength; they

package/dist/vendor/agentcert-sdk/deployment-enforcement.d.ts

@@ -0,0 +1,77 @@
+export type DeploymentAdapterKind = "github_environment" | "kubernetes_admission" | "customer_gateway";
+export interface DeploymentCredentialExchangeResult {
+    credential: {
+        id: string;
+        payload: {
+            schemaVersion: "witnora.deployment_credential.v0.1";
+            artifactDigestSha256: string;
+            target: {
+                environment: string;
+                deploymentUri: string;
+            };
+            adapters: DeploymentAdapterKind[];
+            mode: "PROMOTION" | "ROLLBACK" | "BREAK_GLASS";
+            expiresAt: string;
+        };
+        status: "ISSUED";
+    };
+    token: string;
+}
+export declare function exchangeGitHubOidcPromotionGrant(input: {
+    baseUrl: string;
+    projectId: string;
+    promotionGrantId: string;
+    identityProviderId: string;
+    brokerApiKey: string;
+    audience?: string;
+    adapters: DeploymentAdapterKind[];
+    rationale: string;
+    ttlSeconds?: number;
+    idempotencyKey?: string;
+    fetch?: typeof fetch;
+    environment?: NodeJS.ProcessEnv;
+}): Promise<DeploymentCredentialExchangeResult>;
+export declare function claimDeploymentAdmission(input: {
+    baseUrl: string;
+    projectId: string;
+    credentialId: string;
+    deploymentToken: string;
+    adapter: DeploymentAdapterKind;
+    artifactDigestSha256: string;
+    deploymentUri: string;
+    idempotencyKey?: string;
+    fetch?: typeof fetch;
+}): Promise<{
+    admitted: true;
+}>;
+export declare function deployWithPromotionEnforcement<T>(input: {
+    admission: Parameters<typeof claimDeploymentAdmission>[0];
+    deploy: () => Promise<T>;
+    observe: (result: T) => Promise<{
+        artifactDigestSha256: string;
+    }>;
+    rollback?: (result: T) => Promise<void>;
+}): Promise<{
+    result: T;
+    observedArtifactDigestSha256: string;
+}>;
+export interface KubernetesAdmissionReview {
+    apiVersion: "admission.k8s.io/v1";
+    kind: "AdmissionReview";
+    request?: {
+        uid: string;
+        object?: {
+            metadata?: {
+                annotations?: Record<string, string>;
+            };
+            spec?: Record<string, unknown>;
+        };
+    };
+}
+export declare function createKubernetesAdmissionHandler(options: {
+    baseUrl: string;
+    projectId: string;
+    deploymentToken: () => string | Promise<string>;
+    fetch?: typeof fetch;
+}): (review: KubernetesAdmissionReview) => Promise<Record<string, unknown>>;
+//# sourceMappingURL=deployment-enforcement.d.ts.map

package/dist/vendor/agentcert-sdk/deployment-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-enforcement.d.ts","sourceRoot":"","sources":["../../../../agentcert-sdk/src/deployment-enforcement.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;AAEvG,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE;QACV,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE;YACP,aAAa,EAAE,oCAAoC,CAAC;YACpD,oBAAoB,EAAE,MAAM,CAAC;YAC7B,MAAM,EAAE;gBAAE,WAAW,EAAE,MAAM,CAAC;gBAAC,aAAa,EAAE,MAAM,CAAA;aAAE,CAAC;YACvD,QAAQ,EAAE,qBAAqB,EAAE,CAAC;YAClC,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;YAC/C,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,MAAM,EAAE,QAAQ,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CA6B9C;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,CAiB9B;AAED,wBAAsB,8BAA8B,CAAC,CAAC,EAAE,KAAK,EAAE;IAC7D,SAAS,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC;QAAE,oBAAoB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,CAAC,CAAC;IAAC,4BAA4B,EAAE,MAAM,CAAA;CAAE,CAAC,CAW/D;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,qBAAqB,CAAC;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,EAAE;QACR,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE;gBAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;aAAE,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;KAClG,CAAC;CACH;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,IACe,QAAQ,yBAAyB,KAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAsBnF"}

package/dist/vendor/agentcert-sdk/deployment-enforcement.js

@@ -0,0 +1,109 @@
+import { randomUUID } from "node:crypto";
+export async function exchangeGitHubOidcPromotionGrant(input) {
+    const requestFetch = input.fetch ?? fetch;
+    const environment = input.environment ?? process.env;
+    const requestUrl = environment.ACTIONS_ID_TOKEN_REQUEST_URL;
+    const requestToken = environment.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+    if (!requestUrl || !requestToken)
+        throw new Error("GitHub Actions OIDC is unavailable. Set permissions: id-token: write.");
+    const oidcUrl = new URL(requestUrl);
+    oidcUrl.searchParams.set("audience", input.audience ?? "witnora-deployment-broker");
+    const oidcResponse = await requestFetch(oidcUrl, { headers: { authorization: `Bearer ${requestToken}`, accept: "application/json" } });
+    const oidcBody = await responseObject(oidcResponse);
+    if (!oidcResponse.ok || typeof oidcBody.value !== "string")
+        throw new Error(message(oidcBody, `GitHub OIDC request failed (${oidcResponse.status}).`));
+    const response = await requestFetch(`${stripSlash(input.baseUrl)}/v1/projects/${encodeURIComponent(input.projectId)}/promotion-grants/${encodeURIComponent(input.promotionGrantId)}/exchange-deployment-credential`, {
+        method: "POST",
+        headers: { authorization: `Bearer ${input.brokerApiKey}`, "content-type": "application/json" },
+        body: JSON.stringify({
+            providerId: input.identityProviderId,
+            oidcToken: oidcBody.value,
+            adapters: input.adapters,
+            rationale: input.rationale,
+            ttlSeconds: input.ttlSeconds ?? 300,
+            idempotencyKey: input.idempotencyKey ?? `${environment.GITHUB_RUN_ID ?? "local"}:${environment.GITHUB_RUN_ATTEMPT ?? "1"}`,
+        }),
+    });
+    const body = await responseObject(response);
+    if (!response.ok)
+        throw new Error(message(body, `Deployment credential exchange failed (${response.status}).`));
+    return body;
+}
+export async function claimDeploymentAdmission(input) {
+    const response = await (input.fetch ?? fetch)(`${stripSlash(input.baseUrl)}/v1/runtime/projects/${encodeURIComponent(input.projectId)}/deployment-credentials/${encodeURIComponent(input.credentialId)}/admit`, {
+        method: "POST",
+        headers: { authorization: `Bearer ${input.deploymentToken}`, "content-type": "application/json" },
+        body: JSON.stringify({
+            adapter: input.adapter,
+            artifactDigestSha256: input.artifactDigestSha256,
+            deploymentUri: input.deploymentUri,
+            idempotencyKey: input.idempotencyKey ?? randomUUID(),
+        }),
+    });
+    const body = await responseObject(response);
+    if (!response.ok)
+        throw new Error(message(body, `Deployment was denied (${response.status}).`));
+    return body;
+}
+export async function deployWithPromotionEnforcement(input) {
+    await claimDeploymentAdmission(input.admission);
+    const result = await input.deploy();
+    try {
+        const observation = await input.observe(result);
+        if (observation.artifactDigestSha256 !== input.admission.artifactDigestSha256)
+            throw new Error("Observed deployment digest does not match the admitted artifact digest.");
+        return { result, observedArtifactDigestSha256: observation.artifactDigestSha256 };
+    }
+    catch (error) {
+        if (input.rollback)
+            await input.rollback(result);
+        throw error;
+    }
+}
+export function createKubernetesAdmissionHandler(options) {
+    return async (review) => {
+        const uid = review.request?.uid ?? "missing-uid";
+        const annotations = review.request?.object?.metadata?.annotations ?? {};
+        const credentialId = annotations["witnora.com/deployment-credential-id"];
+        const artifactDigestSha256 = annotations["witnora.com/artifact-digest-sha256"];
+        const deploymentUri = annotations["witnora.com/deployment-uri"];
+        if (!credentialId || !artifactDigestSha256 || !deploymentUri)
+            return admissionReview(uid, false, "Missing Witnora deployment credential annotations.");
+        const images = workloadImages(review.request?.object?.spec);
+        if (!images.length || !images.every((image) => image.endsWith(`@sha256:${artifactDigestSha256}`))) {
+            return admissionReview(uid, false, "Workload image digest does not match the Witnora admitted artifact digest.");
+        }
+        try {
+            await claimDeploymentAdmission({
+                baseUrl: options.baseUrl, projectId: options.projectId, credentialId,
+                deploymentToken: await options.deploymentToken(), adapter: "kubernetes_admission",
+                artifactDigestSha256, deploymentUri, idempotencyKey: `k8s:${uid}`, fetch: options.fetch,
+            });
+            return admissionReview(uid, true, "Witnora deployment credential admitted the exact artifact and target.");
+        }
+        catch (error) {
+            return admissionReview(uid, false, error instanceof Error ? error.message : "Witnora deployment admission failed.");
+        }
+    };
+}
+function admissionReview(uid, allowed, messageValue) {
+    return { apiVersion: "admission.k8s.io/v1", kind: "AdmissionReview", response: { uid, allowed, status: { message: messageValue } } };
+}
+function workloadImages(spec) {
+    const template = object(spec?.template);
+    const podSpec = object(template?.spec) ?? spec;
+    if (!podSpec)
+        return [];
+    const containers = [...array(podSpec.containers), ...array(podSpec.initContainers)];
+    return containers.flatMap((value) => {
+        const container = object(value);
+        return typeof container?.image === "string" ? [container.image] : [];
+    });
+}
+function object(value) { return value && typeof value === "object" && !Array.isArray(value) ? value : undefined; }
+function array(value) { return Array.isArray(value) ? value : []; }
+async function responseObject(response) {
+    return await response.json().catch(() => ({}));
+}
+function message(body, fallback) { return typeof body.error === "string" ? body.error : fallback; }
+function stripSlash(value) { return value.replace(/\/$/, ""); }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.9.2",
+  "version": "0.9.3",
   "description": "Witnora evidence, assurance release gates, runtime records, and regression CI for autonomous AI systems.",
   "type": "module",
   "license": "Apache-2.0",
@@ -39,6 +39,10 @@
     "./browser-adapter-kit": {
       "types": "./dist/vendor/onegent-runtime/browser-adapter-kit.d.ts",
       "import": "./dist/vendor/onegent-runtime/browser-adapter-kit.js"
+    },
+    "./deployment-enforcement": {
+      "types": "./dist/vendor/agentcert-sdk/deployment-enforcement.d.ts",
+      "import": "./dist/vendor/agentcert-sdk/deployment-enforcement.js"
     }
   },
   "files": [
@@ -47,7 +51,7 @@
     "package.json"
   ],
   "scripts": {
-    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json && tsc -p tsconfig.onegent-vendor.json",
+    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json && tsc -p tsconfig.onegent-vendor.json && tsc -p tsconfig.sdk-vendor.json",
     "prepack": "npm run build",
     "test": "vitest run tests",
     "demo:report": "node dist/cli.js report --mcpbench ../../examples/reports/passing/results.json --out .witnora/demo --subject demo-agent"