feat(ql3): establish 3.0 incubation baseline

2026-09-22 19:29:13 +08:00 · 2026-08-12 00:25:26 +08:00
parent 4bf92dcfeb
commit c699c32461
2817 changed files with 779642 additions and 653 deletions
@@ -0,0 +1,119 @@
+const assert = require('node:assert/strict');
+const { test } = require('node:test');
+const {
+  InvalidLocalOwnerDeliveryAcknowledgementGcValueError,
+  MIN_LOCAL_OWNER_ACKNOWLEDGEMENT_AUDIT_RETENTION_MS,
+  MIN_LOCAL_OWNER_ACKNOWLEDGEMENT_REPLAY_RETENTION_MS,
+  localOwnerDeliveryAcknowledgementGcRetentionPolicyDigest,
+  normalizeCompactLocalOwnerDeliveryAcknowledgementCommand,
+} = require('../dist/local-owner/localOwnerDeliveryAcknowledgementGc');
+const {
+  localOwnerSecretDeliveryAcknowledgementSemanticDigest,
+} = require('../dist/local-owner/localOwnerBootstrap');
+
+const ACK_MUTATION_ID = '00000000-0000-4000-8000-000000000a01';
+const GC_MUTATION_ID = '00000000-0000-4000-8000-000000000a02';
+const COMPACTED_AT_MS = 4_000_000_000;
+
+function policy() {
+  return {
+    version: 1,
+    replayRetentionMs: MIN_LOCAL_OWNER_ACKNOWLEDGEMENT_REPLAY_RETENTION_MS,
+    auditRetentionMs: MIN_LOCAL_OWNER_ACKNOWLEDGEMENT_AUDIT_RETENTION_MS,
+  };
+}
+
+function command() {
+  return {
+    mutationId: GC_MUTATION_ID,
+    requestId: 'acknowledgement-gc-1',
+    acknowledgementMutationId: ACK_MUTATION_ID,
+    expectedKind: 'credential',
+    expectedDeliveryDigest: 'd'.repeat(64),
+    bridgeClearEvidence: {
+      kind: 'credential',
+      acknowledgementMutationId: ACK_MUTATION_ID,
+      inspectedAtMs: COMPACTED_AT_MS,
+      evidenceDigest: 'e'.repeat(64),
+    },
+    retentionPolicy: policy(),
+    compactedAtMs: COMPACTED_AT_MS,
+    audit: {
+      eventId: GC_MUTATION_ID,
+      requestId: 'acknowledgement-gc-1',
+      operationId: 'owner.delivery_acknowledgement.gc',
+      projectId: null,
+      subject: { type: 'system', id: 'owner-acknowledgement-gc' },
+      authenticationId: 'local-owner-console',
+      outcome: 'allowed',
+      reasons: ['delivery_acknowledgement_gc'],
+      fence: null,
+      occurredAtMs: COMPACTED_AT_MS,
+    },
+  };
+}
+
+test('normalizes exact acknowledgement GC policy and bridge-bound command', () => {
+  const normalized = normalizeCompactLocalOwnerDeliveryAcknowledgementCommand(
+    command(),
+  );
+  assert.equal(Object.isFrozen(normalized), true);
+  assert.equal(Object.isFrozen(normalized.bridgeClearEvidence), true);
+  assert.equal(
+    localOwnerDeliveryAcknowledgementGcRetentionPolicyDigest(policy()),
+    localOwnerDeliveryAcknowledgementGcRetentionPolicyDigest({ ...policy() }),
+  );
+});
+
+test('rejects widened commands, weak retention and bridge identity drift', () => {
+  assert.throws(
+    () =>
+      normalizeCompactLocalOwnerDeliveryAcknowledgementCommand({
+        ...command(),
+        force: true,
+      }),
+    InvalidLocalOwnerDeliveryAcknowledgementGcValueError,
+  );
+  assert.throws(
+    () =>
+      normalizeCompactLocalOwnerDeliveryAcknowledgementCommand({
+        ...command(),
+        retentionPolicy: { ...policy(), replayRetentionMs: 1 },
+      }),
+    InvalidLocalOwnerDeliveryAcknowledgementGcValueError,
+  );
+  assert.throws(
+    () =>
+      normalizeCompactLocalOwnerDeliveryAcknowledgementCommand({
+        ...command(),
+        bridgeClearEvidence: {
+          ...command().bridgeClearEvidence,
+          kind: 'challenge',
+        },
+      }),
+    InvalidLocalOwnerDeliveryAcknowledgementGcValueError,
+  );
+});
+
+test('acknowledgement semantic digest binds kind-specific identity and time', () => {
+  const record = {
+    kind: 'credential',
+    mutationId: ACK_MUTATION_ID,
+    requestId: 'owner-provision-1',
+    subjectId: `usr_${'a'.repeat(22)}`,
+    credentialId: `own_${'b'.repeat(22)}`,
+    factDigest: 'c'.repeat(64),
+    ttlMs: 600_000,
+    deliveryDigest: 'd'.repeat(64),
+    acknowledgedAtMs: 10,
+  };
+  const digest = localOwnerSecretDeliveryAcknowledgementSemanticDigest(record);
+  assert.match(digest, /^[0-9a-f]{64}$/);
+  assert.notEqual(
+    digest,
+    localOwnerSecretDeliveryAcknowledgementSemanticDigest({
+      ...record,
+      acknowledgedAtMs: 11,
+    }),
+  );
+});